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Preface 


The present monograph collects together the main results of two projects funded by 
the German Research Foundation (DFG). The first one, titled “Logical Consequence. 
Epistemological and Proof-Theoretic Perspectives” (TR1112/1-1) ran from 2012 
to 2015. The second one, a continuation of the previous one, was titled “Logical 
Consequence and Paradoxical Reasoning” (TR112/3-1) and ran from 2015 to 2018. 

The material here presented is largely based on a series of articles that constitute 
part of the output of the two projects. 

In particular, Chaps. | and 3 and Appendix A are based on 


1. Tranchini, 2018: “Stabilizing quantum disjunction” Journal of Philosophical 
Logic, 47 (6): 1029-1047. 

2. Tranchini, 2021: “Proof-theoretic harmony: Towards an intensional account’, 
Synthese, 198 (Suppl 5): 1145-1176. 


Chapter 5 is a substantial reworking of the content of the articles: 


3. Tranchini, 2015: “Harmonising harmony” The Review of Symbolic Logic, 8 (3): 
411-423. 

4. Tranchini, 2016: “Proof-theoretic semantics, paradoxes and the distinction 
between sense and denotation", Journal of Logic and Computation, 26 (2): 
495-512. 

5. Tranchini, 2019: “Proof, meaning and paradox. Some remarks” Topoi, 38 (3): 
591-603. 


Chapter 4 is based on material taken from items 3—5, and Chap. 2 is partly based on 
material coming from items 2, 4 and 5 and it partly consists of the original material. 
Finally, Chap. 6 is based on 


6. Schroeder-Heister and Tranchini, 2017: “Ekman’s paradox” Notre Dame Journal 
of Formal Logic, 58 (4): 567—581. 

7. Schroeder-Heister and Tranchini, 2018: “How to Ekman a Crabbé-Tennant” 
Synthese, Online First. 
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Introduction 


The original contribution of the present monograph is that of articulating in an explicit 
way the role played by the notion of identity of proofs in proof-theoretic semantics. 

Although identity of proofs is a topic of active research in more mathemati- 
cally oriented strands of proof theory, it has been—with very few exceptions—either 
ignored or only implicitly hinted at in the more philosophically oriented literature 
so far. On the understanding of proof-theoretic semantics that underlies the present 
work, this is mostly unfortunate. Identity of proofs is here taken to be indispensable 
to properly formulate the scopes and goals of proof-theoretic semantics. 

In particular, it will be shown that identity of proofs plays a key role both to 
clarify some core notions of proof-theoretic semantics, such as that of harmony, and 
to broaden the range of the phenomena which can be analyzed using the tools of this 
semantic paradigm, so as to include for instance paradoxes. 

In the first chapter, the concept of harmony is shown to arise by considera- 
tions about the role of assertion in the theory of meaning. When applied to rules 
in the format of natural deduction, harmony can be explained by making reference 
to certain transformations on derivations, called reductions and expansions. These 
are the central ingredient of the proofs of normalization for natural deduction calculi 
and of related results. These provide the formal basis for the considerations to be 
developed in the following chapters. The chapter ends with a brief discussion of other 
accounts of harmony. 

In the second chapter, proof-theoretic semantics is presented as primarily 
concerned with the relationship between proofs (understood as abstract entities) and 
derivations (the linguistic representations of proofs). This relationship is developed in 
analogy with that between names and (abstract) objects in Frege's semantic picture. 
On this Fregean conception of proof-theoretic semantics, reductions and expansions 
should be viewed as identity-preserving operations on derivations. These opera- 
tions thus induce an equivalence relation on derivations (where equivalent deriva- 
tions denote the same proof), which in turn can be used to define an equivalence 
relation on formulas stricter than interderivability, called isomorphism. Identity of 
proofs and formula isomorphism show the intensional nature of this conception of 
proof-theoretic semantics. The chapter ends with a comparison between this Fregean 
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conception of proof-theoretic semantics and the one advocated by Dummett and 
Prawitz, which is based on a notion of validity of derivations. 

The third chapter, which concludes the first part of the work, discusses how the 
intensional account of harmony sketched in the first chapter can be developed in 
a systematic way for a class of connectives whose rules are obtained in a uniform 
way from a principle of inversion. We discuss and compare different ways of formu- 
lating inversion principles and finally we investigate the prospects of developing an 
account of harmony for connectives whose rules do not obey inversion, pointing at 
the weakness of the approaches proposed in the literature so far. 

The fourth chapter introduces the topic of the second part of the work, namely the 
Prawitz-Tennant analysis of paradoxes. According to it, paradoxes are derivations 
of a contradiction which cannot be brought into normal form, due to “loops” (or 
more generally, other patterns resulting in non-termination) arising in the process 
of reduction. After presenting Prawitz’s original formulation of Russell’s paradox, a 
simplified presentation of it is introduced. Finally, the chapter discusses the relevance 
for the Prawitz-Tennant analysis of the difference between intuitionistic and classical 
logic, and of structural properties of derivability. 

The fifth chapter deals with the following question: Which modifications does 
the account of proof-theoretic semantics developed in the second chapter need to 
undergo for it to be applicable to languages containing paradoxical expressions? The 
intensional account of proof-theoretic semantics is enriched by introducing a notion 
of sense alongside the one of denotation. Paradoxical derivations in proof-theoretic 
semantics are then shown to play a role analogous to that of singular terms endowed 
with sense but lacking a denotation in Frege’s semantic picture. The question of which 
class of derivations should be regarded as having a denotation is reconsidered. The 
choice of different criteria of identity of proofs is shown to have far-reaching conse- 
quences for the analysis of languages containing paradoxical expressions. In order 
to maintain that a derivation is valid iff it denotes a proof, Dummett and Prawitz’s 
definition must be substantially modified. Two alternative accounts of validity, tied 
to two distinct conceptions of identity of proofs, are discussed and compared. 

The last chapter of the second part of the work discusses two distinct kinds of 
phenomena, first observed by Crabbé and Ekman, showing that the Tennant-Prawitz 
criterion for paradoxicality overgenerates, that is, there are derivations which are 
intuitively non-paradoxical but which fail to normalize. We argue that a solution 
to "Ekman's paradox" consists in restricting the set of admissible reduction proce- 
dures to those that do not yield a trivial notion of identity of proofs. We then discuss 
a different kind of solution, due to von Plato, and recently advocated by Tennant, 
consisting in reformulating natural deduction elimination rules in general (or paral- 
lelized) form. Developing intuitions of Ekman, we show that the adoption of general 
rules has the consequence of hiding redundancies within derivations. Once reduc- 
tions to get rid of the hidden redundancies are devised, it is clear that the adoption 
of general elimination rules offers no remedy to the overgeneration of the Prawitz- 
Tennant analysis. In this way, we indirectly provide further support for our own 
solution to Ekman's paradox. 
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In the concluding chapter, we summarize the main results of the investigation. 
We stress the composite nature of the relationship between proofs and meaning. In 
particular, the question of which criteria of identity of proofs should be accepted 
can be answered in different ways, and different answers mirror different ways of 
conceiving certain general features of a theory of meaning on proof-theoretic basis. 

An appendix spells out the formal details of the calculus of higher level rules 
first introduced by Schroeder-Heister, together with the definitions of the technical 
notions used throughout the work. 
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Chapter 1 A) 
Harmony via Reductions and Expansions — 


Abstract The notion of harmony arises by considerations about the notion of asser- 
tion in the theory of meaning. When applied to rules in the format of natural deduc- 
tion, harmony can be explained by making reference to certain transformations on 
derivations, called reductions and expansions. Reductions are a key ingredient of the 
proof of normalization for the calculus of natural deduction for intuitionistic logic. 
In this calculus, normal derivations that are closed (i.e. such that their conclusions 
depend on no assumption) end with an introduction rule, a fact which is referred to 
as the canonicity of closed normal derivations. The condition for the canonicity of 
normal derivations in a more general setting are discussed. The chapter ends with a 
brief discussion of other accounts of harmony. 


1.1 Meaning Theory and Harmony 


A theory of meaning for a given language is a description of what a subject needs 
to know to qualify as a competent speaker of that language. In spite of widespread 
agreement on this general characterization, the question of what does ‘to know’ mean 
in this context has received very different answers. 

One of the most influential answers to this question is that of Dummett [11, 12]. 
His starting point is the observation that the competent speakers of a language are 
able to interact with each other using a wide range of speech acts such as questions, 
commands, and—most importantly—assertions (see, e.g. p. 417, [11]).! The key 
aspects of the practice of assertion are the abilities of speakers to make assertions 
under appropriate conditions and to react appropriately to assertions made by other 
speakers. Thus, an essential task of a theory of meaning is that of accounting, on the 
one hand, of the knowledge of the conditions under which a proposition is correctly 
asserted, i.e. the assertibility conditions of the proposition; and, on the other hand, 
of the knowledge of the consequences that can be drawn from the assertion of a 
proposition. 

Since the practice of assertion is rational, there must be a close connection between 
these two aspects of assertion, a connection to which Dummett refers as the principle 
of harmony: 
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Harmony: Informal statement 1 The consequences that can be drawn from the 
assertion of a proposition can be neither more nor less than those that are guaranteed 
by the satisfaction of its assertibility conditions. 


To clarify this idea, Dummett (see [11], p. 454) discusses an example aimed at 
showing that the violation of harmony induces irrational elements in linguistic prac- 
tices. The example considered is ‘boche’, a derogatory term with which the Anglo- 
Americans referred to German people during the First World War. The conditions 
for applying the predicate to a person (and thus for asserting his being a boche) are 
that the person is of German nationality, while the consequences that can be drawn 
from the assertion of ‘He is a boche.’ are the barbarism and cruelty of the subject of 
the proposition. The disharmony between the two aspects of statements of this type 
shows the non-rationality of the use of the term ‘boche’ and the need to modify the 
linguistic practices that involve it. 

Harmony therefore has not only a descriptive value, but also a normative compo- 
nent, i.e. if the assertibility conditions of a proposition and the consequences that can 
be drawn from its assertion do not coincide, then the linguistic community ought to 
change its practices.? 

As Dummett himself admits, the universal validity of the principle of harmony is 
a very strong demand, and it is doubtful that the two aspects of any possible assertion 
in a given language are in perfect harmony. Nonetheless, given that we are willing to 
concede that the linguistic practices in which we are involved as speakers are rational 
(at least for the most part), it seems natural to expect a theory of meaning to satisfy 
certain general conditions that guarantee that the practices it describes are (at least 
in principle) harmonious. 


1.2 Harmony and Natural Deduction 


Some of these conditions depend on another essential aspect of language, namely 
that a competent speaker of a language is able to produce and understand a potentially 
infinite set of distinct utterances, starting from his understanding of a finite set of 
minimal linguistic units (words) endowed with meaning. This aspect of language, 
perhaps the only one distinguishing human language from other forms of animal 
language, is made possible by the existence of expressions which can be used to 
build complex expressions starting from simpler expressions. One class of these 
expressions is that of logical constants, which in particular allow the formation of 
complex propositions starting from one or more simpler propositions. 

As on the syntactic level complex propositions are obtained by composing sim- 
pler propositions, on the semantic level the meaning of complex propositions will 
depend on the meaning of their components and on the way in which they are com- 
posed. This principle, called compositionality, is embodied in a theory of meaning 
of the type outlined by Dummett by rules that specify the assertibility conditions 


1.2 Harmony and Natural Deduction 


Table 1.1 The natural deduction calculus NI 


A B AAB AAB 
AE AE 
anag ^| A B 
A 
p ADB A JE 
I B 
АОВ 7 
А В 
ГЕ л [A] [В] 
AvB ANE v = £ C VE 
C 
T TI no elimination rule for T 


no introduction rule for L 


— LE 


(respectively the consequences of the assertions) of complex propositions in terms 
of the asseribility conditions (resp. the consequences of the assertions) of their 
components. 

The paradigm for these rules are those of the calculus of natural deduction for 
intuitionistic logic NI [20, 65]. In this calculus (whose rules are depicted in Table 1.1), 
two types of rules are associated with each logical constant: introduction rules and 
elimination rules. The introduction rules for a logical constant Т are those which 
allow one to infer a complex proposition having + as main operator, and thus they 
specify the assertibility conditions of such propositions; in the elimination rules 
for +, a complex proposition having + as main operator acts as the main premise? 
of the rules, and these rules thus specify which consequences can be drawn from its 
assertion. 

In the case of conjunction, the introduction rule AI allows one to infer from 
two propositions their conjunction,^ and thus expresses the fact that the assertibility 
conditions of a conjunction are satisfied when those of both conjuncts are. The two 
elimination rules AE; and AE» allow one to infer from a conjunction each of the two 
conjuncts (respectively), and thus express the fact that the consequences that can be 
drawn from the assertion of a conjunction are all those that can be obtained from the 
two conjuncts. 

In order to guarantee the harmony between the two aspects of assertion, the rules 
of introduction and elimination that govern the logical constants cannot be chosen 
arbitrarily. In particular, an inappropriate choice of introduction and elimination rules 
for a connective may result in a situation analogous to that of ‘boche’. Exemplary in 
this sense is the binary connective tonk introduced by Prior [76], governed by the 
following pair of introduction and elimination rules: 
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A A tonk B 
A tonk B tonkl B tonkE 


As in the case of ‘boche’, the consequences that can be drawn from the assertion 
of a complex proposition governed by tonk do not coincide with what is warranted 
by the fulfillment of its assertibility conditions, and the disharmony between the two 
aspects of the practice of assertion deprives this of rationality: given the rules of 
tonk every proposition can be inferred from any other. 

As (and even more than) in the case of boche, the strong intuition that tonk is 
"semantically defective" shows that not every collection of introduction and elimi- 
nation rules for a connective is apt to determine the meaning of complex propositions 
in which the connective is the main operator. 

Hence, in natural deduction, the requirement of harmony as applying to logically 
complex propositions becomes a condition that should be satisfied by the collections 
of introduction and elimination rules. We can informally state it as follows?: 


Harmony: Informal statement 2 What can be inferred from a logically complex 
proposition by means of the elimination rules for its main connective is no more and 
no less than what has to be established in order to infer that very logically complex 
proposition using the introduction rules for its main connective. 


The rules of tonk display no match between what can be inferred using the 
elimination rule and what is needed to establish the premise of the elimination rule 
using the introduction гие. Thus, even if A and B are meaningful statements, their 
“contonktion” A tonk B is nonsense since the rule governing tonk are ill-formed.’ 

In contrast to the rules of tonk, the rules for conjunction of NI display a perfect 
match. 


1.3 Harmony, Reductions and Expansions 


Both informal characterizations of harmony given above make clear that harmony is 
two-fold condition, and we will refer to its two components as the ‘no more’ and ‘no 
less’ aspect of harmony.? The two aspects of harmony are closely connected with 
two different kinds of deductive patterns. 

Patterns of the first kind are those giving rise to maximal formulas occurrences, 
sometimes referred to as ‘local peaks’ [12] or ‘hillocks’ (used by von Plato to translate 
Gentzen's original ‘Hügel [64]). These are formula occurrences which are the major 
premise of an application of an elimination rule and that are the consequence of an 
application of one of the introduction rules. 

When the rules for a connective are in harmony, configurations of this kind are 
clearly redundant. In particular, the possibility of "leveling" these local peaks shows 
that harmonious elimination rules allow one to infer no more than what has to be 
established to infer their major premise by introduction. 
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Prawitz [65] defined certain operations on derivations called reductions that, when 
applied to a derivation, transform it into another one by getting rid of a single maximal 
formula occurrence.? 

In the case of conjunction, there are two patterns of this kind, of which one can 
get rid as follows: 


Dı Dr Zi 2 
2 2, 
гав. AI reduces to | A B AI reduces to : 
AAB A AAB 
m ES AE, E AE2 


Patterns of the other kind are those in which the premises of applications of 
introduction rules have been obtained applying the corresponding elimination rules. !° 
These patterns could be described as local valleys since they result when one infers a 
complex proposition from itself by first eliminating and then reintroducing its main 
connective. Prawitz [66] defined operations that are, in a sense, the dual of reductions, 
called (immediate) expansions to introduce such valleys within a derivation. The 
possibility of “expanding” a derivation via a local valley amounts to the fact that 
harmonious elimination rules allow one to infer no less than what is needed to infer 
their major premise by introduction.!! In the case of conjunction, the expansion is 
the following: 


2 2 
2 AAB AAB 
AAB expands to I АЁ! T ЕН. 
AAB 


In the case of implication, we have the following reduction and expansion: ^: ? 


и 
[А] 2 
: dj! reduces to P 
(и) ———,- 21 2 
ADB A B 
B 
D 
G 
2 expands to SEHE. - Я DE 
ADB (u) oB JI 
ADB 
(with u fresh for 2) 


Most of the literature on harmony has focused on logical constants. However, there 
seems to be no principled reason to restrict the account of harmony just sketched 
to these expressions only. For any inductively definable n-ary predicate P, it is 
possible to formulate introduction and elimination rules for atomic propositions 
P(ti,...,t,), so that an introduction rule for a primitive n-ary predicate P yields а 
derivation having P(ti,...,1,) as conclusion (where fj, ..., tn are singular terms), 
while an elimination rule for a primitive n-ary predicate P is one that, applied to a 
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derivation having P (tj, ..., tn) as conclusion and, possibly, other derivations, yields a 
derivation of some other proposition. For example, the following are the introduction 
and elimination rules for the unary predicate Nat expressing the property of being a 
natural number (in the rules, we use S as a unary function symbol for the successor 
function and with A(t/x) we indicate capture-avoiding substitution of t for x in A):!* 


[Al[Nat x] 


Natl, Nat x Nat I 
Має 0 Nat Sx ati» Natt A(0/x) A(Sx/x) — 


A(t/x) 


(where x is an eigenvariable) 


Whenever the major premise Nat f is the consequence of an application of one of 
the two introduction rules for Nat, a reduction is readily defined, and an expansion 
can be defined as well, by applying the elimination rule taking A to be Nat x.!° 

In the following we will (with a few exceptions) restrict ourselves to rules gov- 
erning propositional connectives, thereby disregarding the exact nature of the non- 
logical vocabulary. The application of the ideas presented in the next chapters to 
specific languages, such as the one of arithmetic, represents an interesting challenge, 
but goes beyond the scope of the present work. 


1.4 Some Formal Definitions 


We will henceforth write Zi T Ф (respectively 21 ы Ф) when 2 is obtained 
by one application of the reduction (respectively expansion) for implication from 
2.16 This is to be understood to mean that 


e either Z, and Z; are of the form depicted to the left-hand and right-hand side of 
the reduction (resp. expansion) above; 

e orthat Z» is obtained by replacing in Ф| one of its subderivations having the form 
depicted on the left-hand side of the reduction (resp. expansion) with a derivation 
having the form depicted on the right-hand side of the reduction (resp. expansion). 
(This latter case will be referred to as the congruence condition for 5-reduction 
(resp. expansion).) 


We will refer to these relations as one-step > B-reduction and one-step Dn-expansion. 
We will use a similar notation for one-step reductions and expansions of con- 
junction and of the other connectives introduced below. For connectives with more 


, б СИТ : 1AB 
than one introduction (resp. elimination) rule we use subscripts (e.g. 2 > ' Dy and 


IAB f : че - ; : 
Dı > Ф іп the case of conjunction) to distinguish between the relations induced 
by the reductions getting rid of maximal formula occurrences which are the conse- 
quences (resp. major premises) of different introduction (resp. elimination) rules. 
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Sometimes, we will omit the subscripts and/or the indication of the connective 


(thus writing e.g. Z rd J and Z a Ф") where the omission of the connective (and 
possibly of the subscript) indicates that Z» can be obtained from Y, using some 
reduction (resp. expansion) for some connective. 

If a B-reduction is available to get rid of a maximal formula occurrence whose 
main connective is T, the latter will be referred to as a T -redex (contraction of 
reducible expression). 


We indicate with É the relation of B-reduction which is the reflexive and transitive 


| е 2 ; B 
closure of the relation of one-step 6-reduction. That is, we write Z > Z' when for 
some n > | there is a sequence of n-derivation Zi, ..., Z, (to which we will refer 


to as a B-reduction sequence for 2) such that 0 = 2, Z, = 9 and Z;. , “ 2D; for 
each 1 « i < n. Similar notation and terminology will be adopted for 7-expansion 
as well. 

Sometimes it will be useful to refer to the inverses of these relations as well, that 


ST ci a aL 02 . D i 
we will indicate with < i (respectively > у Clearly, also these relations may be 
dubbed (one-step) expansions and reductions respectively, and hence ‘D-reduction’ 


is actually ambiguous between Y and > (and ‘D-expansion’ between Z% and Е ). 
When precision is required we will speak of 2 8-гейосйоп and Dn-reduction (and 
Dn-expansion and > В-ехрапѕіоп), but as we already did until now, we will however 


use ‘D-reduction’ (resp. ‘D-expansion’) to indicate the relation rs (resp. ч). 

We observe that we will often speak of “applications” of D£-reduction (and 
similarly for other reductions/expansion), thereby treating D£ as a function that given 
a derivation Z and a particular maximal formula occurrence of the form A D B in 2 
yields the result of reducing that maximal formula occurrence. We take this notion 
of reduction as function as clear enough and we omit its precise definition. 

We will use the term conversion to refer to f-reductions, f-expansions, n- 
reductions, -expansions, as well as to further transformations on derivations to 
be introduced in the following chapters. 


1.5 Some Formal Results 


A derivation 9 is called B-normal iff it is not possible to -reduce it any further 


(i.e. iff gk 2 implies Z' = 2). In the (5, A}-fragment of NI (we will indicate 
this fragment as NI^2) Prawitz [65] showed how any given derivation Z can be 
transformed into a -normal one by successive applications of the D6- and л8- 
reductions. 

The proof is non-trivial, since an application of D f-reduction to a given derivation 
may yield a derivation containing the same number of maximal formula occurrences, 
or even more. (For an example consider the result of 6-reducing the encircled occur- 
rence of A D B in the derivation of Table 1.2 below.) However, it is always possible 
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Table 1.2 A derivation illustrating the non-triviality of normalization 


1 
Ао (Ао В) А 


1 
ADB a. А 
В DE (2) poa! " 
(1) "EY — DI z >E 


to find a maximal formula occurrence such that, by 6-reducing it, the number of max- 
imal formula occurrences of maximum degree in the resulting derivation is lower 
than in the original derivation, where the degree of a maximal formula occurrence 
is the number of logical constants it contains." Therefore, for every derivation J in 
NI^- there is a -reduction sequence starting with Z and ending with a 8-normal 
derivation. 

This result, known as the weak normalization theorem for B-reduction in NI”, 
has been strengthened using a method introduced by Tait [107] to what is nowadays 
called the strong normalization theorem for 8-reduction in NI“, namely that in 
NI^- there are no infinite B-reduction sequences (that is, in the process of 6-reducing 
a derivation, no matter which maximal formula occurrence is chosen at any step, if 
one keeps on f-reducing one will always reach a 6-normal derivation). 

Given their significance for the following, we discuss some properties of 6-normal 
derivations in NI^2. 

First, each derivation in NI^2 has a unique B-normal form, i.e. no matter how 
a derivation is reduced, one will always end up with the same 6-normal derivation. 
This property is an immediate consequence of the confluence property (sometimes 


Church-Rosser property) of the relation of 6-reduction, that is the fact that if 2 É Zi 


and 2 É Ф, then there is Z' such that both J, É Z and 2; А Z/. (See Table 1.3 
for an example of two f-reduction sequences for the same derivation ending with 
the same £-normal derivation. In the table, the target of each arrow is a derivation 
obtained by 6-reducing one of the maximal formula occurrences in the derivation 
which is the source of that arrow.) 

Second, 6-normal derivations in NI^- enjoy the subformula property, that is every 
formula occurring in a 6-normal derivation is either a subformula of the conclusion or 
of one of the undischarged assumptions of the derivation.? The subformula property 
is an immediate consequence of the peculiar form of 6-normal derivations in NI^2. 
This can be described using the notion of track, where a track is a sequence of formula 
occurrences in a derivation such that (1) the first is an assumption of the derivation; 
(ii) all other members of the sequence are the consequence of an application of an 
inference rule of which the previous member is one of the premises; (iii) none of 
them is the minor premise of an application of 5E. 


11 
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In each track of a B-normal derivation in NI^^, all eliminations precede the 
introductions (otherwise the track, and hence the derivation would contain a max- 
imal formula occurrence). The two parts (either of which is possibly empty) of a 
track are separated by a minimal part. This is a formula occurrence which is both the 
consequence of an elimination and the premise of an introduction. Furthermore, each 
formula occurrence in the elimination part is a subformula of the preceding formula 
occurrence in the track, and each formula occurrence in the introduction part is a 
subformula of the next formula occurrence in the track (since the premises of intro- 
duction rules are of lower complexity than the consequences, and the consequences 
of elimination rules are of lower complexity than the (major) premise). 

A bit more formally, we have the following: 


Fact 1 (The form of tracks) Each track A, ... Ai—1, Aj, Арі, ... An in a -normal 
derivation in NI^? contains a minimal formula A; such that 


e If i > 1 then А; (for all 1 < j <i) is the major premise of an application of an 
elimination rule of which Aj; is the consequence and thereby А у. is a subfor- 
mula of Aj. 

e If n >i then A; (for all i < j < n) is the premise of an application of an intro- 
duction rule of which А ур is the consequence and thereby A; is a subformula 
of A IESU 


Proof For a derivation to be 6-normal, all applications of elimination rules must 
precede all applications of introduction rules in all of its tracks: This warrants the 
existence of a minimal formula in each track. Since a track ends whenever it *encoun- 
ters" the minor premise of an application of 5E, the subformula relationships between 
the members of a track hold (as it can be easily verified by checking the shape of the 
rules of NI^2). 


From this it follows (almost) immediately that 6-normal derivations in NI^? enjoy 
the subformula property: each formula in a 6-normal derivation is the subformula 
either of the conclusion or of one of the undischarged assumptions of the derivation. 


Fact 2 (Subformula property) All formulas іп a В-погта] derivation in NI^? are 
subformulas either of the conclusion or of some undischarged assumption. 


Proof 'The proof of the theorem is by induction on the order of tracks, where the 
order of a track is defined as follows: The tracks to which the conclusion belong 
are of order 0. A track is of order n if its last formula is the minor premise of an 
application of DE whose major premise belong to a track of order n — 1 (see for 
details [65], Chap. Ш, Sect. 2). 


In the calculus NI^^, strong normalization and confluence hold for r-reduction 
as well.? These results hold moreover for the relation of By-reduction (notation 


Bn ; А S ; 
>), that is defined as the reflexive and transitive closure of one-step £75-reduction 


> 1 РТ р 1 1 
(notation gs which is the union of 4 and >. 
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For the relation resulting by putting together 6-reduction and n-expansion, Prawitz 
[66] established a weak normalization theorem by showing that by successively 
applying expansions it is possible to transform any given a £-normal derivation in 
NI^? into опе in which all minimal formula occurrences of all tracks are atomic. 
This relation is also confluent, but not strongly normalizing (due to the possibility 
of constructing looping infinite chains of n-expansions followed by 8-reductions). 
However, in the case of the purely implicational fragment of NI (we refer to it as МІУ) 
Mints [49] has shown that strong normalization can be recovered by disallowing n- 
expansions of formulas of the form A D B which are the consequence of DI or the 
major premise of DE (see also [35] for a discussion). 


1.6 Canonicity 


It is not the case that 6-normal derivations have the subformula property in every 
calculus of natural deduction consisting of harmonious rules.?? Consider for example 
the calculus NI?^2, the extension of NI^? with quantification over propositions 
governed by the following rules (we indicate with A(B/ X) the result of substituting 


the free occurrences of X in A with B)?! 


Аад YXA ор 
УХ.А А(В/Х) 


(where Х is an eigenvariable) 


The rules are in harmony as testified by the possibility of defining the following 
reduction and expansion (in the reduction, Z(B/ X) indicates the derivation that 
results by uniformly substituting all free occurrences of X in Z with B): 


2 2 

A оу V8 2(В/Х) 2 vin УХА VE 
VX.A VE A(B/X) VX.A A v 
A(B/ X) VX.A 


In contrast to the other elimination rules so far encountered, the consequence of 
an application of V?E might be of higher complexity than its premise, due to the 
fact that the complexity of the formula B (called the witness of the rule application) 
can be arbitrary. This features complicates significantly the proof of normalization 
of f-reduction in NI?^? (strong normalization of -reduction in a calculus akin to 
NI^^ was first established by Girard [22] using a generalization of the method of 
Tait mentioned above). Moreover, f-normal derivations in NI?^? do not enjoy the 
subformula property, as shown by the following £-normal derivation (in the example, 
the witness of the application of V?E is VX.X D C which is also the premise of the 
rule application): 


VX.X 5C 


(VX.X DC)DC VX.X 5C 
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There is however another, though much weaker, property which is warranted by 
the harmonious setup of the rules of the calculus. This property, to which we will 
refer to as canonicity, is not enjoyed by any £-normal derivation, but only by those 
B-normal derivations which are also closed (i.e. such that all their assumptions are 
discharged): In harmonious calculi, any such derivation ends with an introduction 
rule. 

Canonicity holds for any arbitrary natural deduction calculus provided it satisfies 
the following two conditions: 


Definition 1.1 (Harmonious calculus) A natural deduction calculus” is said to be 
harmonious iff: 


1. АП rules of the calculus are either introduction or elimination rules. 
We stress that 
e No restriction is imposed on introduction rules (in particular no complexity 
condition has to be satisfied for the result to hold); 
e only a mild requirement is imposed on elimination rules, namely that no elimi- 
nation rule is such that its applications can discharge assumptions in the deriva- 
tion of the major premise. 


2. For every maximal formula there is a -reduction to get rid of it (i.e. every 
maximal formula is a 8-гейех). 


Fact 3 (Canonicity) In an harmonious natural deduction calculus, every closed and 
P-normal derivation ends with an application of an introduction rule. 


Proof We check by induction on the number of inference rules applied in a deriva- 
tion that either the antecedent of the theorem is false or the consequent is true. If the 
derivation consists only of an assumption it is not closed. The inductive case of a 
derivation consisting of п + 1 rule applications falls into two sub-cases. The deriva- 
tion ends either with an introduction rule or with an elimination rule. In the former 
case, we are done. In the latter case, we have to show that the derivation is either 
open or it is not B-normal. We apply the induction hypothesis to the subderivation of 
the major premise and we distinguish two sub-cases: either the subderivation is open 
or itis not 6-normal and then so is the whole derivation (because of the mild require- 
ment on elimination rules in condition 1 above); or the subderivation ends with an 
introduction rule, but then the whole derivation is not 6-normal as the major premise 
of the application of the elimination rule yielding the conclusion of the derivation is 
obtained by introduction. 


Henceforth, we will refer to derivations ending with an introduction rule as canon- 
ical derivations.” 
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1.7 Normalization, Subformula Property, Canonicity 
and Harmony 


In every harmonious calculus, 6-normal derivations can be equivalently characterized 
as those containing no maximal formula occurrence. 

In calculi which are not harmonious, however, this is not in general the case. 
Consider the extension of NI^2 with the rules for tonk, which we will refer to as 
NI^?t?^* The calculus is not harmonious in that it fails to satisfy the condition 2 of 
Definition 1.1: In such a calculus, it is not possible to devise a reduction to get rid of 
any maximal formula occurrence whose main connective is tonk, as the following 
example shows (in the example A is an arbitrary proposition and p an atomic one): 


и 


А 
(и) ———51 
АРА (T) 
(AD A) tonk p колы 


The occurrence of (A 5 A) tonk p in T is maximal. Nonetheless, there is no way 
to further 6-reduce the derivation, which therefore qualifies as 6-normal. 

To consider the above derivation as -normal may appear counterintuitive at first. 
The reason is that, on the one hand, the notion of normal derivation is usually pre- 
sented as meant to capture the intuitive idea of a derivation containing no redundancy; 
and, on the other hand, maximal formula occurrences are usually taken to constitute 
a kind of conceptual redundancy within derivations. Sticking to these intuitions, one 
may expect a necessary condition for a derivation of any calculus (and not just of an 
harmonious one) to qualify as normal to be that the derivation does not contain any 
maximal formula occurrences. 

It is however doubtful that maximal formula occurrences should always count 
as constituting a redundancy. This is certainly the case in NI^2, where consecutive 
applications of DI and DE, or of Al and either AE; or AE» do constitute a conceptual 
detour. But what about a calculus containing the rules for tonk? The rules for tonk 
are clearly not in harmony. This is tantamount to denying that we had already a 
derivation of the consequence of an application of the elimination rule, provided that 
the premise had been established by introduction. In other words, when we establish 
something passing through a complex formula governed by tonk, we are not making 
an unnecessary detour. The fact that the rules for tonk are not in harmony means 
exactly thatin some (actually most) cases itis only by appealing to its rules that we can 
establish a deductive connection between two propositions not involving tonk. This 
is the opposite of the claim that maximal formula occurrences having tonk as main 
connective constitute a redundancy. Rather, they are the most essential ingredient for 
establishing a wide range of derivability claims. For example, in the derivation T, 
the maximal formula occurrence (A D A)tonk p is in no way redundant: without 
passing through it, it would have been impossible to establish the conclusion р.2* 
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Hence, we do not take the fact that 6-normal derivations in a calculus like 
NI^2*?"* might contain maximal formula occurrence as showing that there is some- 
thing amiss with the definition of normality. 

Of course this is not to deny that there is something amiss with N1 and in 
fact the notion of 6-normal derivation can be used to make clear what is amiss with 
this calculus. Although 6-reduction is normalizing in NI^?*?"* (this can be easily 
proved in the same way as it was done for NI^^), neither do 6-normal derivations 
have the sub-formula property, nor are all closed 6-normal derivations canonical. 

In the next chapters, we will show that the canonicity of closed 6-normal deriva- 
tions of harmonious calculi plays a crucial role for their (proof-theoretic) semantic 
interpretation. The fact that not every B-normal derivation in a calculus like NI*>t°"* 
is canonical thus shows its semantic defectiveness. 

Itis worth stressing that among harmonious calculi we find not only calculi such as 
NI?^—in which 8-normal derivations do not possess the subformula property—but 
also calculi in which B-reduction is not (weakly) normalizing. Like the failure of the 
subformula property for 6-normal derivation in NI?^^, the failure of normalization 
of B-reduction does not invalidate Fact 3, i.e. in every harmonious calculus, even 
those in which not every derivation can be reduced to a 6-normal derivation, those 
derivations which are both closed and $-normal are canonical as well. 

We conclude by observing that all (standard) natural deduction calculi for classi- 
cal logic are obtained by the addition of one or more rules to NI which are neither 
introduction nor elimination rules. Hence these calculi do not comply with the defi- 
nition of ‘harmonious calculus’ given above. Itis by now commonplace that classical 
logic can be given an harmonious presentation by either abandoning natural deduc- 
tion (typically in favor of sequent calculus) or by enriching natural deduction in 
different ways (typically, by allowing derivations to have multiple conclusions, or 
by considering “refutation” rules along side standard “proof” rules). Although we 
do not exclude the possibility of systematically applying the ideas to be developed 
in the next chapters (possibly in modified form) to these other formal settings, in the 
present work we will restrict our attention to standard natural deduction calculi, and 
therefore leave classical logic out of the picture. 


r^otonk 


1.8 AQuick Comparison with Other Approaches 


The account of harmony sketched in Sect. 1.3 differs from the account of harmony 
stemming from Belnap [2], who cashed out the no more and no less aspects of the 
informal definition of harmony in terms of conservativity and uniqueness respec- 
tively.” 

Following Dummett (who refers to conservativity as ‘global’ harmony and to the 
availability of reductions as ‘intrinsic’ harmony), for some authors (see e.g. [94], 
pp. 1204—5) the distinctive feature of Belnap’s conditions is their being "global", in 
contrast with other “local” ways of rendering the informal definition of harmony, 
such as the one in terms of reductions and expansions.”° 
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In our opinion, however, what crucially distinguishes the account of harmony 
sketched in the previous section from the one of Belnap—as well as from those of 
other authors, such as Tennant’s (see, e.g. [108])—is something else: Both conserva- 
tivity and uniqueness are defined in terms of derivability (i.e. of what can be derived 
by means of the rules for a connective) and not in terms of properties involving the 
internal structure of derivations (i.e. of how something can be derived). We propose 
to refer to accounts of harmony based on derivability as extensional, while those 
making explicit reference to the internal structure of derivations will be referred to 
as intensional. 

The choice of this terminology will become clear in the course of the next chapter, 
in which it shown how starting from reductions and expansions one naturally arrives 
at a notion of identity of proofs and of formula isomorphism. 


Notes to This Chapter 


1. For a recent critical discussion of the thesis that assertion plays a distinguished 
role among speech acts, see [81]. 

2. The exact meaning of harmony is however open to different interpretations. In 
particular, in the subsequent literature, there is no agreement on whether harmony 
should be considered as a descriptive or a normative criterion; nor whether it 
should be considered as a criterion of “significance” or of “logicality” (that is, if 
expressions governed by rules that are not in harmony should be considered as 
meaningless; or as meaningful but not belonging to the logical vocabulary) or of 
something else. In the present chapter, we will stick to the reading of harmony as 
meaningfulness. A more specific characterization of the significance of harmony 
will be given in Sect. 3.6. See also Note 7 below. 

3. More precisely, we call the major premise of an application of an elimination 
rule the one which corresponds, in the rule schema, to the premise in which the 
connective to be eliminated occurs. 

4. I am therefore taking for granted that what is established by a proof, and what 
one can draw inferences from, is a proposition, rather than, say, a judgment that a 
proposition is true. The distinction between judgment and proposition, on which 
some authors particularly insist (see, e.g. [106]), will not play any significant role 
in the present work. The reason for the choice here made is of mere convenience. 

5. Terminologically, [12] uses *harmony' sometimes to refer only to the no more 
aspect of this condition (see, e.g. pp. 247—248, [12]) and sometimes to refer to 
both (see, e.g. p. 217, [12]). Later on (see, e.g. p. 287, [12]), Dummett introduces 
the term ‘stability’ to cover both aspects. Here, we will follow Jacinto and Read 
[34] and use ‘stability’ to refer to the no less aspect of harmony, where ‘harmony’ 
is understood as covering both aspects. We also remark that sometimes one refers 
to what has to established in order to infer a proposition A as the (direct, or 
canonical) grounds for A and harmony is informally stated as the requirement 
that “Whatever follows from the direct grounds for deriving a proposition must 
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follow from that proposition” (this formulation is due to Negri and von Plato 
[53], p. 6) to which one may add, ‘(and nothing else).’ in order to stress the two- 
fold nature of the requirement. Negri and von Plato [53] refer to their informal 
formulation of harmony as ‘inversion principle’. We will however reserve the 
term ‘inversion principle’ for functions yielding collections of elimination rules 
as outputs when applied to collections of introduction rules as inputs. Three 
distinct inversion principles in our sense will be discussed in Sects. 3.4, 3.7 and 
3.9 (on related terminological issues, see also Note 6 to Chap. 3). Finally, we 
observe that, although Dummett himself stressed that harmony is a two-fold 
condition, the proof-theoretic semantic literature has been mostly concerned 
with the no more aspect of it (but see e.g. [7, 8, 52] for notable exceptions), thus 
making our informal characterization of harmony, to some extent, non-standard. 
Whereas tonk's rules fail to meet both the no less and the no more aspect of the 
informal characterization of harmony, there are connectives which fail to satisfy 
only one of the two. A connective with the same introduction rule as conjunction 
and the same elimination rule as implication is an example of a connective failing 
to satisfy the no less aspect, but satisfying the no more aspect (see pp. 158—159, 
[52]). For another example, consider the connective whose rules are obtained 
from those of conjunction by dropping one of the two elimination rules. For a 
connective satisfying the no less aspect but failing to satisfy the no more aspect 
one may consider a variant of tonk with two introduction rules (corresponding 
to both introduction rules for disjunction). In this case using the elimination rule 
one would obtain no less than what is needed to introduce the connective again 
using the second introduction rule. 


. А referee objected that from our diagnosis of A tonk B as nonsense it looks 


“as if harmony was a criterion for meaningfulness, although perhaps it is best 
interpreted as a criterion for logicality (in line with Dummett's own admission 
that it cannot be reasonably asked for all the expressions of the language)." The 
objection is fair but a full evaluation of it, though of the utmost importance 
for the current debates on proof-theoretic semantics, goes beyond the scope of 
the present work. Here we only remark that: (1) In spite of Dummett's own 
admissions, it is undeniable that he is at least strongly sympathetic to the equa- 
tion between harmony and meaningfulness. (One of) Dummett's [12] aim(s) is 
to recast Brouwer's criticisms of classical mathematics (namely that of being 
incomprehensible, viz. meaningless) by showing that the rules for the logical 
constants in classical logic are not harmonious. (We do not thereby want to com- 
mit ourselves either to the cogency of Dummett's arguments, nor to the tenability 
of Brouwer's views.) (ii) Even if harmony is not a criterion for meaningfulness, 
its applicability goes certainly beyond that of logical expressions, as shown by 
the rules for the predicate 'x is a natural number' which we briefly discussed at 
the end of Sect. 1.3. (We are here implicitly endorsing the view on which the 
natural number predicate is a non-logical expression. Though widespread, this 
view has been notoriously challanged by logicist and neo-logicist, see [114].) 
See also Note 2 above. 
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8. 


11. 


12. 


13. 


14. 


15. 


16. 


Schroeder-Heister [94] refers to the two aspects of harmony as the ‘criterion of 
reduction’ and the ‘criterion of recovery’ respectively. Steinberger [102] refers to 
collections of rules that fail to meet the no more and no less aspects of harmony as 
cases of *E-strong' (or equivalently “I-weak’) disarmony and cases of 'E-weak' 
(or equivalently ‘I-strong’) disarmony respectively. 


. However, new ones may be generated in the process, see below. 
. For rules discharging assumptions, we distinguish between their premises and 


their immediate premises (see Definition A.1 in the appendix). In the case of an 
instance of DI with consequence A D B, the immediate premise is B, while the 
premise is the (concrete) rule A — B. The distinction is relevant for showing that 
in the expansion for implication given below, the local valley accords with the 
general description just given. Through a single application of DE one obtains 
a derivation of B from A and A D B, that by Definition А.б (see Sect. A.5 in 
the appendix) counts as a derivation of the rule A — B (from the assumption 
ADB). 

The idea that expansions express the no less aspect of harmony has been first 
explicitly formulated by Pfenning and Davies [58]. 

In actual and schematic derivations, discharge is indicated with natural numbers 
placed above the discharged assumptions and in angle brackets to the left of 
the inference line at which the assumptions are discharged. Sometimes, u, v 
possibly with subscripts are used in place of numbers. As detailed in Appendix A, 
according to the “official” definition of derivations all assumptions (and not only 
those that are discharged) actually carry a numerical label. Which assumptions 
count as discharged thus depends only on the numerical labels in angle brackets 
to the left of inference rules. With very few exceptions (see e.g. Footnote 5 
to Chap. 2), the labels above undischarged assumptions are irrelevant for the 
issues described in the present work, and hence they will be mostly omitted. In 
schematic derivations, a formula in square brackets indicates an arbitrary number 
(> 0) of occurrences of that formula, if the formula is in assumption position, or 
of the whole subderivation having the formula in brackets as conclusion. Square 
brackets are also used in rule schemata to indicate the form of the assumptions 
that can be discharged by rule applications. 

That u is fresh for Z means that the application of DI in the expanded derivation 
discharges no assumptions of the form A in 2. 

That x is an eigenvariable means that x does not occur free in any assumption 
of the derivation of the minor premise A(Sx/x) other than those discharged by 
the rule. 

For a general pattern to produce rules for inductively defined predicates covering 
the identity relation, the predicate ‘being a natural number’ and other more 
complex notions as special cases, see [42]. 

The choice of the notation is motivated by the Curry-Howard correspondence 
(between derivations in the implicational fragment of NI and terms of the sim- 
ply typed A-calculus), under which the reduction and expansion for implication 
correspond (respectively) to steps of B-reduction and 7-expansions on A-terms: 
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An application of > -reduction introduces new maximal formula occurrences 
whose degree is not lower than the one cut away only when: (1) the derivation of 
the minor premise of the relevant application of DE contains at least one maxi- 
mal formula occurrence whose degree is not lower than the one of the maximal 
formula occurrence cut away by the application of D £; and (ii) the relevant appli- 
cation of DI discharges more than one assumption. Choose among the maximal 
formula occurrences in a derivation in NI one of maximal degree which does not 
fulfill condition (1) above (such a formula occurrence can always be found). Let 
n be the degree of the chosen formula. By cutting away such a maximal formula 
occurrence with D£, the number of maximal formula occurrences of degree n 
necessarily decreases by one. 

For a precise definition of the notion of undischarged assumption of a derivation, 
see Definition A.4 in Appendix A. 


ae П. 2 | А 
The proof of strong normalization for > in NI^?” can be given by induction 
on the number of “local valleys”, since there are no complications analogous 


to those connected with Df-reduction. The proof of confluence for > is also 


1 
immediate since it follows from the confluence of > (which is immediate) by a 
simple induction on the length of n-reduction sequences. In contrast, the proof 


of confluence for » is more involved and it requires the introduction of a relation 


"between" 4 and E which can be (almost) immediately shown to be confluent. 
A general definition of what is here understood by a ‘calculus’, although 
restricted to purely propositional languages (without quantification) is given 
in the Appendix, see Sect. A.4. At a few points, calculi equipped with rules for 
first-, or second-order quantification will be mentioned, as in the present section, 
but no general characterization of them will be provided. 

That X is an eigenvariable here means that X does not occur free in A or in any 
undischarged assumption on which A depends. 

A precise formulation of what is here understood by ‘introduction rule’ and 
‘elimination rule’ is given in the Appendix, see Definition A.12 in Sect. A.9. 
Prawitz refers to derivations ending with an introduction rule as ‘canonical’ 
starting from [68]. The term ‘canonical’ is used in the same way in Martin-Lóf's 
constructive type theory, although it does not appear as late as [44] in Martin- 
Lóf's writings. Dummett (see [12], pp. 260—261) defines canonical derivations 
in a more stringent way, by requiring canonical derivations to consist (roughly 
said) of introduction rules with the exception of their open subderivations on 
which no restriction is placed. In particular, the closed derivations in NI^- that 
qualify as canonical in Dummett's sense are the ,,-normal derivations to be 
discussed in Sect. 2.7 below. On canonical derivations in Dummett's sense, see 
also Notes 6 and 14 to Chap. 2. 
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24. In Chap. 6 we will actually provide arguments to reject the assumption that for 
a derivation to be normal it must be redundancy-free. This is however irrelevant 
for the present point. 

25. The fact that uniqueness is a way of rendering the no less aspect of harmony may 
not be obvious at first, but see [94], рр. 1204-5. Observe moreover that Belnap's 
aim is that of providing conditions that a collection of rules has to satisfy in order 
to be able to qualify as implicit definitions of a connective, rather than that of 
defining harmony. 

26. For a contrasting opinion on the globality of uniqueness, however, see [52], 
p. 151. 
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Chapter 2 A) 
Identity of Proofs ENS 


Abstract Proof-theoretic semantics is here presented as primarily concerned with 
the investigation of the relationship between proofs (understood as abstract entities) 
and derivations (the linguistic representations of proofs). This relationship is taken 
to be analogous to that between names and (abstract) objects in Frege. On this con- 
ception of proof-theoretic semantics, reductions and expansions should be viewed 
as identity-preserving operations on derivations and thus as inducing an equivalence 
relation on derivations such that equivalent derivations denote the same proof. Using 
this equivalence on derivations it is possible to define an equivalence relation on for- 
mulas that is stricter than interderivability, called isomorphism. We argue that identity 
of proofs and formula isomorphism show the intensional nature of this conception of 
proof-theoretic semantics. Finally, this conception is compared to the one advocated 
by Dummett and Prawitz, which is based on a notion of validity of derivations. 


2.1 Proof-Theoretic Semantics 


Semantic theories are alternatively presented either as a definition of a semantic 
predicate or as consisting in a mapping from linguistic entities onto semantic values. 
In traditional semantic theories, in which ‘true’ is the central semantic predicate, 
the semantics can be seen as mapping true sentences onto the truth-value “Truth’ (in 
Fregean terms) or onto facts (in a more Russellian or Wittgensteinian fashion). 

According to Schroeder-Heister [87], the core of proof-theoretic semantics (hence- 
forth PTS) is a definition of the predicate ‘valid’. Unlike ‘true’, which applies to 
sentences, ‘valid’ applies to more complex linguistic structures: derivations.! 

In analogy with traditional semantic theories, and following suggestions implicit 
in the work of Prawitz and Martin-Lof, it seem plausible that PTS could also be 
viewed as mapping syntactic expressions onto semantic values. In the case of PTS, 
the syntactic expressions and the semantic values in question are, respectively, deriva- 
tions and proofs. That is, valid derivations are regarded as denoting, or representing, 
proofs. 
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Thus, in PTS the syntactic category of expressions to which meaning is primar- 
ily assigned is that of derivations rather than propositions. Meaning is assigned to 
propositions only derivatively, by saying that the semantic value of a proposition is 
the set of its proofs. 

As in traditional semantics ‘true’ (and ‘false’ ) are qualifying predicates (in contrast 
to the modifying usage of ‘false’, as in ‘false friend’), one would expect ‘valid’ to 
play the role of distinguishing the class of derivations that denote proofs from a 
broader class of derivations, among which one could find also some invalid ones. 
In the second part of the present work (see in particular Chap. 5), the derivations of 
contradictions arising in languages containing paradoxical expressions will be taken 
to be the prototype of invalid derivations. However, this way of understanding invalid 
derivations differs substantially from the one arising from (several) definition(s) of 
validity advanced by Prawitz [66—68, 70, 73] and Dummett [12]. 

A discussion of the definition of validity raises several issues which complicate 
the discussion of the idea that in PTS proofs are the semantic values of (some, 
i.e. possibly not all) derivations. Moreover, in the first part of the present work, we 
will indeed focus on natural deduction calculi in which all derivations can be safely 
taken to denote proofs. For these reasons, in the present chapter, we will initially 
leave the notion of validity out of the picture, by assuming that all derivations of 
the natural deduction calculi to be considered do denote proofs, henceforth dropping 
the qualification ‘valid’. The version of PTS endorsed by Dummett and Prawitz, in 
which the notion of validity plays a central role, will be presented in the final sections 
of the present chapter (see in particular Sects. 2.9—2.11). 


2.2 Proofs as Constructions 


The idea that proofs are the semantic values of formal derivations is particularly 
fitting for a specific conception of proofs, namely the one developed in the context of 
the intuitionistic philosophy of mathematics. According to intuitionism (see [32], for 
a survey) mathematics is not an activity of discovery, but of creation. Thus, mathemat- 
ical objects are not entities populating some platonic realm existing independently 
of us. They are rather conceived as the result of an activity of construction, which 
intuitionists assume to be performed by an opportunely idealized knowing subject. 

Proofs themselves are regarded as forming a particular variety of mathematical 
objects and a mathematical object qualifies as a proof of a certain proposition only 
if it satisfies certain conditions. Some of these conditions depend on the logical 
form of the proposition in question and they constitute what is nowadays called the 
Brouwer-Heyting-Kolmogorov (henceforth BHK) explanation. 

Each clause of the BHK explanation (see, e.g. [123], Sect.3.1) specifies a con- 
dition that a mathematical entity has to satisfy in order to qualify as a proof of a 
logically complex sentence of a given form. The clauses are formulated using cer- 
tain basic operations which are assumed to be available to the creative subject in their 
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activity of construction. For instance, the clause for conjunction says that a proof 
of a conjunction A ^ B is obtained by pairing together a proof of A and a proof 
of B. Traditionally the explanation is silent as to what counts as a proof of atomic 
propositions, with the exception of identity statements, whose proofs are taken to be 
computations of some sort.” 

The BHK clause for implication requires some explanation: in traditional formu- 
lations, a proof of an implication A D B is said to be a general method of construction 
transforming any proof of A into a proof of B, where by ‘general method’ one under- 
stands essentially a function from proofs of A to proofs of B. The use of the word 
‘function’ is, however, somewhat misleading, in that a proof of an implication is not 
a function in Frege's sense of an unsaturated entity, but rather (to stick to Frege's ter- 
minology) a function as ‘course of values’. For Frege, courses of values are objects 
that are associated with unsaturated functions by means of a specific operation 
ё ®(e)that takes an unsaturated function f (£) as argument and that yields its course 
of values èf(e)as value. The operation ё (e)is understood by Frege as an unsat- 
urated function as well, though of higher level (thus, essentially like a quantifier, but 
applicable not just to first-level concepts, but to arbitrary first-level functions). Two 
distinct notions of application are associated with the two notions of function: appli- 
cation of a genuine (i.e. unsaturated) function f (&) to an argument a simply consists 
in filling the argument-place of the function (henceforth referred to as its slot) with 
the argument a, thereby yielding f(a); the application of a function as course-of- 
values, on the other hand, is itself а two-place (unsaturated) function app(é, б), 
which applied to a function as course of values £f (£)and to its argument a yields 
as value the same object that one would obtain by placing the second argument 
of the application-function in the slot of the unsaturated function from which the 
course of values is obtained, i.e. app(& f (€), а) = f (a)(for a thorough discussion 
of the distinction between the two notions of function, see [11, Chap. 8]). 

In a fully analogous way, a proof of an implication A D B is to be understood 
as the (abstract) object that results by applying an operation of higher-level to an 
"unsaturated proof entity", where an unsaturated proof entity is a function that filled 
with (applied to) a proof of A yields a proof of B [see 106]. Such a function, which 
may be described as “а proof of B whose construction depends on a proof of A", 
is what Prawitz [75] calls an *unsaturated ground' for B, and Sundholm [105, 106] 
a ‘dependent proof-object’*; and the operation that constructs out of it a proof of 
A D B is (A-)abstraction. 


2.3 Derivations and Proofs 


The idea that derivations in formal systems represent proofs is most fitting for natural 
deduction calculi in the style of Gentzen and Prawitz. In particular the idea of viewing 
derivations in these calculi as linguistic representations of proofs can be articulated 
in close analogy with Frege's traditional picture of the relationship between language 
and reality. 
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A key ingredient of Frege’s conception is the distinction between singular terms, 
which denote objects, and predicates or, more generally, functional expressions, 
which denote concepts or, more generally, functions (understood as unsaturated enti- 
ties as detailed in the previous section). In PTS this distinction is mirrored by the one 
between closed and open derivations. Only a closed derivation can be said to denote a 
proof(-object).* The semantic value of an open derivation is not a proof, but rather an 
(unsaturated) function that yields proofs of its conclusion when it is saturated using 
proofs of its assumptions. To clarify this point, consider an open derivation Z of B 
having A as its only undischarged assumption’: 


[A] 

9 

B 
Let Z' beaclosed derivation of A (thus denoting some proof of A). If we replace each 
undischarged occurrence of A in Z with a copy of Z', we obtain a closed derivation 
of B (denoting some proof of B). The derivation 9 can thus be seen as a means of 
mapping each proof of A (denoted by some derivation Z^) onto the particular proof 
B denoted by the composition of 2 with Y’, that we indicate with: 


In other words, we can say that 2 encodes (or denotes) a function from the set of 
proofs of A to the set of proofs of B. 

A second ingredient of Frege's picture is that the same object can be denoted by 
distinct singular terms. For Frege, the sense of a singular term is “Ше way of giving" 
its denotation. The possibility of there being distinct singular terms denoting the 
same object reflects the fact that the same object can be given in different ways. As 
extensively argued by Dummett [11], a ^way of giving an object" can be understood 
as an epistemic attitude towards the object, a way of epistemically accessing it. 

The philosophical literature mostly focused on Frege's famous example of ‘The 
morning star’ and ‘The evening star' —the two traditional singular terms used to refer 
to the same astronomical object, the planet Venus. It seems however that the idea that 
the same object can be denoted in different ways fully unwinds its potential when it 
is applied to abstract objects. 

For example numbers, like proofs, are abstract objects, and in the language of 
arithmetic we have that the same number, e.g. fourteen, can be denoted by distinct 
numerical expressions such as “(3 x 4) + 2’, *12 + 2? and ‘14’. In contrast to ‘The 
morning star’/“The evening star’ example, examples like these make clear the pos- 
sibility of distinguishing between “more direct" and “less direct" ways of denoting 
a given object. Looking at the three numerical expressions just considered we can 
say that, although they all denote the same number, the first does it in a less direct 
way than the second, and the second in a less direct way than the third. In general 
whereas numerals denote numbers in a direct way, complex numerical expressions, 
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such as ‘(3 x 4) + 2’, denote numbers in a less direct way. When a particular numer- 
ical notation is adopted, such as the one of Heyting or Peano arithmetic, this comes 
out even more clearly. In these formal systems, the syntactic structure of a numeral 
‘S... 50° can be thought of as directly reflecting the process by means of which the 
number denoted by the numeral is obtained, i.e. by repeatedly applying the successor 
operation starting from zero. Numerals can thus be said to denote numbers in the 
most direct way possible. 

In the case of derivations and proofs, a strikingly close correspondence can be 
observed between the BHK clauses and the introduction rules. The correspondence 
can be expressed by saying that the introduction rules encode the operations on proofs 
underlying the ВНК clauses. For example. given two closed derivations 2; and A, 
which we assume to denote a proof of A and a proof of B respectively, the following 
closed derivation: 


20 D 
A BI 
Ал В 


can be thought of as denoting the pair of the two proofs. That is, the introduction 
rule for conjunction can be viewed as encoding the operation of pairing, and the 
derivation can be viewed as denoting the proof that results by applying this operation 
to the proofs denoted by the derivations 2) and 2». 

When a closed derivation ends with an introduction rule, we will say that it denotes 
a proof in a canonical manner, where this means that the structure of the derivation 
corresponds, in its last step, to the last step of the process of construction of the 
denoted proof. 

These considerations offer a way of understanding Gentzen's famous dictum “The 
introductions represent, as it were, the ‘definitions’ of the symbols concerned" [20, 
p. 80], namely as saying that what is a proof of a logically complex proposition 
governed by the connective T is by definition what is obtained by applying one of the 
operations encoded by the introduction rules of + to appropriate arguments. 

It is important to stress that, since canonical derivations are simply derivations 
ending with an introduction rule, the structure of a closed canonical derivation reflects 
that of the denoted proof only in its last step, but no more than that.Ó This contrasts 
with the case of numerals, whose structure reflects the process of construction of the 
number throughout (and not only in the last step). In the analogy between proofs 
and numbers, canonical derivations thus correspond to what one may call canon- 
ical numerical expressions, that is expressions of the form ‘St’, where ‘t’ is not 
necessarily a numeral. 

One may therefore ask whether the analogy can be pushed further by identifying 
a class of derivations which stand to proofs as numerals to numbers. For a derivation 
to belong to this class it should denote a proof in the most direct way possible. That 
is, the structure of the whole derivation (and not just its last step) should correspond 
to the structure of the denoted proof (or, better, to the structure of the process of 
construction of which the proof is the result). 
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It seems tempting to say that in harmonious calculi (i.e. those for which Fact 3 
holds) closed 6-normal derivations are those that denote proofs in the most direct way 
possible. In the case of the derivation ending with an application of AI considered 
above, Fact 3 warrants that, if the whole derivation is B-normal, than Z; and Ф will 
also end with an introduction rule (since they are closed and 6-normal as well), so that 
the structure of the derivation will reflect the process of construction of the proof not 
just in its last step, but also in those immediately preceding it (i.e. those represented 
by the last rules applied in 2; and %2). In an harmonious calculus closed 8-normal 
derivation are thus not only canonical, but reflect the structure of the denoted proof 
in a more thorough way. 

As we will see in Sects. 2.7 and 2.8, further elements have to be take into consid- 
eration in order to answer the question of whether closed 6-normal derivations can 
rightly be regarded as those representing proofs in the most direct ways. 

We conclude this section by observing that the conception of PTS developed 
so far is certainly heavily influenced by that of Dummett and Prawitz. However, it 
aims to clarify some confusion which is pervasive in Dummett and Prawitz writings. 
Although both authors ascribe a central role to the distinction between direct and 
indirect ways of verification, they seem to identify ‘direct’ with ‘canonical’. As we 
argued, the structure of a canonical derivation does represent that of the process 
which yields the proof denoted by the derivation, but only in its last step. Moreover, 
Dummett and Prawitz do not always clearly distinguish between proofs and their 
linguistic representations. The closest formulation of the view presented here can 
probably be found in Dummett [e.g. 10, p.32]. Dummett draws a distinction between 
proofs as mental constructions and derivations as linguistic entities (which Dummett 
refers to as ‘demonstrations’) and makes the distinction canonical/non-canonical 
overlap with the one proofs/demonstrations, in the sense that proofs are canonical 
and demonstrations are non-canonical. 


We thus appear to require a distinction between a proof proper—a canonical proof—and 
the sort of argument which will normally appear in a mathematical article or textbook, an 
argument which we may call a ‘demonstration’ [.] [10, p. 32] 


In the view of PTS developed here, however, no issue of ‘canonicity’ (or normality) 
applies to proofs in themselves, but only to their linguistic presentations, viz. deriva- 
tions. Prawitz [73] locates the distinction canonical/non-canonical both at the level 
of derivations (to which Prawitz refers as ‘arguments’) and of proofs and he blames 
Heyting for not stressing the distinction in the case of proofs [e.g. 71, 139]. (In more 
recent work, Prawitz has changed his views and now he agrees that the distinction 
does not apply to proofs (now referred to as ‘grounds’) but only to their linguistic 
representations.) Again, the distinction canonical/non-canonical is here applied only 
to derivations, whereas the BHK clauses are here viewed as characterizing, albeit 
informally, the notion of proof tout court. 
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2.4 From Reductions and Expansions to Equivalence 


Some among the axioms of Peano or Heyting arithmetic, namely the following: 


n+0=n 
m+ Sn = S(m+n) 
nx0=0 


m x $n = m 4 (m xn) 


can be "oriented", so to obtain "rewrite rules" thanks to which any expression denot- 
ing a number that is formed out of 0, S, + and x can be transformed into a numeral 
(e.g. (SSO x SO) + SSO into SS S0). Obviously, when an expression is transformed 
into another using the rewrite rules, the identity of the denoted number is preserved, 
that is the original expression and the one obtained by rewriting denote the same 
number. 

The analogy between numbers and proofs suggests the idea of regarding 
P-reductions as “rewriting rules" on derivations that preserve the identity of the 
denoted proof. But how plausible is this suggestion? 

In the previous section, we observed that the introduction rules can be seen as the 
linguistic representations of these operations on proofs underlying the BHK expla- 
nation. It is not implausible to think that certain operations on proofs are associated 
with the elimination rules as well. For example, the rule AE, can be seen as encoding 
the operation that applied to a pair (of proofs) yields the first member of the pair as 
value. Given this reading of the rules, the left-hand side of the reduction associated 
with AE;: 


Dı Ф 
A B I 
AAB AE} 


is a derivation that denotes the first member of the pair consisting of the proofs 
denoted by 2; and %2. But this is nothing but a cumbersome description of the 
very proof denoted by 21, i.e. by the right-hand side of the reduction. Thus, when а 
derivation 2 is transformed into another derivation 2’ using the reduction associated 
with ЛЕ, the identity of the proof denoted by 2 is preserved, i.e. Z' denotes the 
same proof as Z. 

Analogous considerations can be worked out not only for the 6-reductions for the 
other connectives, but also for the r-expansions (although some authors have stressed 
some important differences, as detailed below in Sect. 2.7). For example, in the case 
of the expansion for conjunction, the expansion of a given derivation Z of A^ B 
denotes the proof which is obtained by pairing together the first and second projection 
of the proof denoted by Z. This again is nothing but a cumbersome description of 
the very same proof denoted by 2.7 
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Given the considerations developed so far, besides the relation of 6-reduction we 
consider a relation of 6-equivalence (notation Ê), which we introduce as the reflexive 
and transitive closure of the relation of one-step -equivalence (notation 22, The 
latter is defined by saying that 2 Z o iff either @ E DoD > 2, and the former 
by saying that 2 £ J’ when for some n > 1 there is a sequence of n-derivations 


Ф, ..., 2, such that 2 = Z, J, = 9' and 2;_1 g£ Zi; foreach 1 <i <n. 

Analogous notions of equivalence can be introduced for each reduction relation 
considered in the previous chapter. 

A crucial property of the relations of 6- and 67-equivalence in the (D, ^, T}- 
fragment of NI (we indicate it as NI^?!) is their non-triviality. That an equivalence 
relation on derivations is non-trivial means that there are at least one formula A and 
two derivations of A belonging to distinct equivalence classes. A typical example 
of two derivations of the same formula which are not 67-equivalent (and hence, a 
fortiori, that are not 6-equivalent either) is this: 


и и 


А А 
саса” TEE 


HR = лас —4DA 
AD(ADA) AD(ADA) 2! 


These two derivations are B7-normal and the fact that they do belong to two different 
Bn-equivalence classes is a consequence of the confluence property of 67-reduction. 
(We remind the reader that confluence means that if one derivation Z reduces in a 
finite number of steps to two distinct derivations Y, and 25, then there should be 
a third one to which the both Ф| and Y reduce in a finite numbers of steps.) As 
for any two distinct 67-normal derivations there is no further derivation to which 
both reduce, it is also not the case that they could be obtained by reducing the 
same derivation. Hence, it is not possible to transform one derivation into the other 
by a chain of £r-reductions and Вл-ехрапѕіопѕ. That is they belong to different 
equivalence classes. The above example thus shows that the notion of identity of 
proofs induced by £8 5-conversions is not trivial. 

It is worth stressing that some formulas have infinitely many distinct proofs. 
Examples of such formulas are those of the form (A D A) D (A D A). Three din- 
stinct proofs of formulas of this form are represented by the following £7-normal 
derivations?: 


и v 
v и АЭА A в 
(v) А у ADA ADA A B 
aoe ы "45425454 2! w 4 or 
(AD А) о (ADA) (u) ADA E 


(AD A) 2 (AD A) 


It is easy to see how an infinite list of 67-normal derivations for formulas of this 
form can be obtained by repeating the addition of an assumption of the form A 5 A 
and of an application of DE.” 
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In NI^?'!, Bn-equivalence plays a distinguished role, as this is the maximum 
among the non-trivial equivalence relations definable on NI^?! -derivations.! As 
Došen [5] and Widebáck [124] argued, the maximality of an equivalence relation 
on the derivations of a calculus K can be taken as supporting the claim that it is the 
correct way of analyzing the notion of identity of proofs underlying K. 

The notion of By-equivalence in NI^?! is well-understood: the decidability of 
P-equivalence is an immediate consequence of normalization and confluence of 
Bn-reduction in NI^2, and its maximality was established by Statman [101], see 
also Došen and Petrić [6] and Widebàck [124]. 


2.5 Formula Isomorphism 


Given an equivalence relation on derivations, it is possible to use it to define an 
equivalence relation on propositions that is, in general, stricter than interderivability 
and that is commonly referred to as isomorphism. Let E be an equivalence relation 
on derivations of a natural deduction calculus K. The notion of E-isomorphism in K 
is defined as follows: 


Definition 2.1 (/somorphism) Two propositions A and B are E-isomorphic in К 


E 
(notation A ~ B) if and only if there is a pair of K-derivations Z, and %, called the 
witness of the isomorphism, such that: 


e Y, is а derivation of A from B and 2; is a derivation of B from A (i.e. A and B 
are interderivable in K); 

e and the two compositions of Ф| and Z» are E-equivalent to the derivations con- 
sisting only of the assumptions of A and of B respectively: 


[В] [А] 

e „т 
B Ë [а] [B] 2 A 
Ф 2 
В А 


Why is this notion called isomorphism? The derivation consisting of ће assump- 
tion of a formula A can be viewed as representing the identity function on the set 
of proofs of A. Hence, the second condition of the definition of isomorphism can 
be expressed by saying that the two derivations Z, and 2 represent two functions 
from proofs of A to proofs of B and vice versa which are the inverse of each other. 
This in turn means that the set of proofs of A and of В are in bijection.! 

Clearly, a necessary condition for some notion of E-isomorphism not to collapse 
onto that of interderivability is that the equivalence relation E used in the definition 
is non-trivial. In particular, if any two derivations Ф| and Y of any formula A from 
itself were E-equivalent, the second condition on the witness in the definition of 
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E-isomorphism would be vacuously satisfied (i.e. any pair of derivations 2, and 2 
of A from B and vice versa would witness the E-isomorphism of A and B). 

In order to establish that two propositions are E-isomorphic in K one can pro- 
ceed syntactically (i.e. by constructing two derivations witnessing the isomorphism). 
Typical examples of 67-isomorphic formulas in NI^? are pairs of formulas of the 
form (A^ В) AC and A A (BAC), or (A ^ B) DC and AD (B D С), as can be 
checked by easily constructing appropriate witnesses. 

To show that two propositions are not E-isomorphic in K one usually argues by con- 
structing a counter-model, consisting in a categorial interpretation of K that validates 
E-equivalence and in which the two propositions in question are not isomorphic. For 
Bn-isomorphism in NI^?', a typical example is provided by interpretations in the 
category of finite sets obtained by mapping 


e atomic propositions on arbitrary finite sets, 

e Т onsome singleton set, 

e the conjunction and implication of two propositions A and B on the cartesian 
product and the function space of the interpretations of A and B. 


rADT 


It easily checked that each inference rule of N1 can be interpreted as a family of 
maps between sets so that the В- and r-equations are validated by the interpretation. 

Using interpretations of this kind it easy to show that propositions of the form 
A ^ A and A are, in general, non-isomorphic. Whenever A is interpreted as a finite 
set of proofs of cardinality « > 1, the interpretations of A and of A ^ A are sets of 
different cardinalities (as the cardinality of the interpretation of A ^ A is x”), and 
thus there cannot be an isomorphism between the two. 

Another example of pairs of interderivable but not necessarily isomorphic proposi- 
tions, which is of relevance for the results to be presented in Chap. 3, is constituted by 
pairs of propositions of the form ((A D В) A (BD А)) A A and (AD В) л (Во 
A)) A В. Whenever A and В are interpreted on sets of different cardinalities, the 
interpretations of the two propositions will also be sets of different cardinalities. 

In fact, the category of finite sets plays a distinguished role for the notion of 
Bn-isomorphism in NI^?': as shown by Solov'ev [99], two formulas of NI^?' are 
Вп-іѕотогрћіс if and only if they are interpreted on sets of equal cardinality in every 
interpretation in the category of finite sets. From this, it follows that B7-isomorphism 
in NI^?! is decidable and finitely axiomatizable. 


2.6 An Intensional Picture 


When inference rules are equipped with reduction and expansions, and thus a notion 
of identity of proofs is available, the notion of logical consequence is no longer to 
be understood as a relation but rather as a graph: beside being able to tell whether 
a proposition is provable we can discriminate between essentially different ways in 
which a proposition is provable. 
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Moreover, using identity of proofs we could introduce the notion of isomorphism. 
This has been proposed (notably by Došen [5]) as a formal explicans of the informal 
notion of synonymy, i.e. identity of meaning. Intuitively, interderivability is only a 
necessary, but not sufficient condition for synonymy. Isomorphic formulas can be 
regarded as synonymous in the sense that: 


They behave exactly in the same manner in proofs: by composing, we can always extend 
proofs involving one of them, either as assumption or as conclusion, to proofs involving the 
other, so that nothing is lost, nor gained. There is always a way back. By composing further 
with the inverses, we return to the original proofs. (Dosen [5], p. 498) 


The fact that the relationship of isomorphism is stricter than that of mere inter- 
derivability makes isomorphism more apt than interderivability to characterize the 
intuitive notion of synonymy in an inferentialist setting. For instance, whereas on an 
account of synonymy as interderivability all provable propositions are synonymous, 
this can be safely denied on an account of synonymy as isomorphism (e.g. A D A is 
not Bn-isomorphic to T, whenever A has more than one proof). 

We may therefore say that when synonymy is explained via isomorphism, we 
attain a truly intensional account of meaning. 

This picture contrasts with the one arising from other accounts of harmony, such 
as Belnap's (see above Sect. 1.8). Belnap accounts for harmony using the notions 
of conservativity and uniqueness, which are defined merely in terms of derivabil- 
ity, rather than by appealing to any property of the structure of derivations. Hence, 
Belnap's criteria for harmony do not yield (nor require) any notion of identity of 
proofs analogous to the one induced by reductions and expansions. Thus, no notion 
of isomorphism is in general available for propositions which are governed by har- 
monious rules in Belnap's sense. Thus on Belnap's approach to harmony, it is not 
obvious that an account of synonymy other than the one in terms of interderivability 
is available and this vindicates the claim that his approach to harmony delivers a 
merely extensional account of logical consequence and meaning.!” 


27 Weak Notions of Reduction and Equivalence 


In Sect. 2.4 the view of reductions and expansions as identity-preserving opera- 
tions was defended by appealing to the nature of the operations associated with the 
introduction and elimination rules. 

In the case of conjunction, what is expressed by the  f-reductions 
(viewed as equivalences) is that the operations associated with the elimination rules 
are those operations that applied to a pair of proofs yield (respectively) the first and 
second member of the pair. 

Onreflection, it seems that this is not something that "follows" from the properties 
of the operations involved, but it may rather be taken as a definition of what the 
projection operations are. In other words, in the case of reductions, it does not seems 
thatthey are "justified" by the nature ofthe operations associated with the conjunction 
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rules (pairing and projections). Rather, the reductions for conjunction can be seen as 
definitions of the projection operations associated with the elimination rules. 

The same does not seem to apply in the case of 7-expansions. If we consider the 
expansion for conjunction, it seems correct to say that its reading in terms of identity 
of proof is only justified by the nature of the operations underlying the inference 
rules for conjunction (and does not play the role of defining them). 

Moreover, whether expansions for other connectives can be seen as identity pre- 
serving, seems to hinge on further assumptions. This is typically the case for impli- 
cation. To assume D7-expansion to be identity preserving is to assume a principle of 
extensionality for the proofs of propositions of the form A D B, namely that two such 
proofs (which are functions from proofs of A to proofs of B) are the same iff they 
yield the same values for each of their arguments.!? Although such an assumption 
is certainly in line with Frege's conception of functions (extensionality is nothing 
but Frege's infamous Basic Law V of his Grundgetzte), some authors [e.g. 44] have 
argued against it. 

When functions are identified by what they do (i.e. by which values they associate 
with their arguments), extensionality is certainly an uncontroversial assumption. Not 
so when functions are understood as procedures to obtain certain values given certain 
arguments. On such a conception of functions, it is very natural to allow for different 
functions (i.e. procedures) to deliver the same result. 

On an understanding of functions as procedures it is thus dubious that every 
instance of n-expansion is identity preserving. In fact, it dubious that even every 
instance f-reduction is identity preserving. For example, let 21 and Y be the fol- 
lowing two derivations: 


1 2 
А AAB 
gm c rel uw хе = % 
m (1) «A o1 
B 5(A»5A) (2) ADA 5I 
BD(ADA) 


The two derivations are obviously 6-equivalent, since 2 B-reduces in one step 
to Zi. But do they denote the same proof? The derivation Zj denotes (the course 
of values of) a constant function f that assigns to any proof of B the (course of 
values of the) identity function on the set of proofs of A. The derivation Z» denotes 
a function g that assigns to any proof of B the (course of values of the) function Л 
that does the following: it takes a proof of A as input and outputs the first projection 
of the pair consisting of the proof of A taken as input and the proof of B that acts as 
argument of the overall proof. The identity function on the set of proofs of A and the 
function h—i.e. the values of the functions f and g (whose courses of values are) 
denoted by Z; and Z»;——are clearly extensionally equivalent functions. However, if 
one chooses as a criterion of identity of functions the set of instructions by means 
of which it is specified how their values are computed, one should conclude that Л 
and the identity function on the proofs of A are two distinct (though extensionally 
equivalent) functions. Hence, so are the two functions f and g, as they yield distinct 
values when applied to the same arguments. 
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What this example shows is that, on an intensional understanding of functions, 
not only n-equivalence, but also 8-equivalence is not always an identity preserv- 
ing relation. In order to capture the notion of identity of proofs faithful to such 
an understanding of functions, 8-equivalence has to be weakened, and one possi- 
bility consists, essentially, in restricting the applications of -reduction to closed 
derivations (i.e. derivations in which all assumptions are discharged). As derivations 
depending on assumptions do not denote proofs, but rather functions from proofs 
of the (undischarged) assumptions to proofs of the conclusion, the removal of local 
peaks from such derivations is not identity preserving: the functions denoted by the 
reduced derivations are not the same as those denoted by the derivations containing 
the local peaks. 

This weakening on the notion of 6-reduction/equivalence is motivated by the fact 
that the notion of reduction is of any semantic significance only for closed derivations. 
Only these represent (proof-)objects, and only for objects it is natural to distinguish 
between more and less direct ways to refer to them. In the case of functions, it 
is doubtful whether such a distinction makes sense at all, at least when functions 
are understood intensionally rather than extensionally. In the latter case, i.e. when 
the criterion of identity for functions is their yielding the same values for the same 
arguments, it may be plausible to speak of more and less direct ways of computing 
certain values. However, if functions are understood as the procedures by means of 
which the values are calculated, a “тоге direct" procedure to determine the values 
from the arguments will simply count as a different function.!^ 


Formally, we indicate the relation of one-step weak 8-reduction as 2 E 2.8 
is common to define one-step weak 6-reduction by modifying опу ће congruence 
condition of the definition of one-step 6-reduction (see above Sect. 1.4), by replac- 
ing ‘subderivation’ with ‘closed subderivation’. In this way one can B-reduce open 
derivations, so that in the example given above the immediate subderivation of 2 
does weakly 6-reduce in one step to the immediate subderivation of Ф|. Nonethe- 
less, the definition achieves its goal for closed derivations, in that Z» does not weakly 
P-reduce in one step to Z| (as its maximal formula occurrence belongs to the open 
subderivation of 2). 


The relation of weak B-reduction p is defined as the reflexive and transitive closure 
18, : А 1w А 
of > апа the relations of weak one-step B-equivalence = and weak f-equivalence 
Bw : ІВ Bw f 
= as the symmetric closure of > and > respectively. 


In the calculus NI^2, most of the results holding for E also hold for jn 


A derivation Z is called B,,-normal iff itis not possible to ,,-reduce it (i.e. iff 2 9 
2' implies J = 2').!5 Weak В-гейисіоп іп NI^? is strongly normalizing (i.e. there 
are no infinite weak £-reduction sequences), and it is confluent. Moreover, not only 
closed 6-normal but also closed 6,,-normal derivations are canonical (i.e. Fact 3 
holds if one replaces В with w). However, the subformula property fails for 6,,- 
normal derivations in NI^? (as testified for instance, by the derivation 9 in the 
above example). 
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In the first part of the present work we will be mostly assuming 67-equivalence, 
rather than this weakening of 6-equivalence as the proper analysis of identity of 
proofs. In the second part, we will argue that the adoption of one or the other makes 
a substantial difference for the analysis of paradoxical phenomena to be worked out 
there.!6 


2.8 Derivations and Proofs, Again 


At the end of Sect. 2.3, we hinted at the possibility of taking £-normal derivations 
as the class of derivations representing proofs in the most direct way possible. In the 
light of the considerations developed in the previous section, however, it should now 
be clear that the choice of the class of derivation that should be considered as “the 
most direct way" of representing proofs is not an absolute one, but it depends on 
the choice of a particular notion of identity of proof. In particular, on an extensional 
understanding of functions, it may be more natural to take 67-normal derivations to 
be those that most directly represent proofs. Alternatively, on an intensional under- 
standing of functions, weak-f-normal derivations could be the most natural choice: 
on such a conception of functions, although a £,-normal derivation may contain 
some maximal formula occurrences (in one of its open subderivations), it would 
still represent the proof it denotes in the most direct way: by further 6-reducing the 
derivation, one would obtain a derivation denoting a different proof. 

We also do not exclude the possibility of finding arguments in favor of accepting a 
middle ground position (such as e.g. claiming that -normal derivations, rather than 
By or Byn-normal ones are those that denote proofs in the most direct way). 

It is however important to stress that any such option makes sense only when 
one considers derivations in harmonious calculi. As discussed in Sect. 1.7, when the 
rules of a calculus are not in harmony, as for instance in the case of NI^2t9nk the 
notion of 8-normal derivation (and, for similar reasons, that of Вл- and 8, -normal 
derivation) is devoid of semantic significance. The starting point for viewing normal 
derivations as the most direct way of representing proofs is their canonicity. In a 
calculus in which normal derivations are not canonical, we lack any reason to regard 
normal derivations as playing a distinguished semantic role. 

Although less dramatic, a further assumption underlying the identification is the 
confluence of the chosen reduction relation. In a calculus like NI^? all of B-, Bn- 
and f,,-reduction are confluent. As we will detail in the next chapter, this is not so in 
general (in fact By-reduction is not confluent already in NI^?! , see [122] Exercise 
8.3.6C) and when this is not the case it does not seem to make much sense to speak 
of the most direct way of denoting a proof. A derivation may have several distinct 
normal forms, and in this case there does not seem to be a criterion to choose one 
among them as the derivation denoting the proof in the most direct way. 

Although derivations and proofs are entities of different sorts, when derivations 
in normal form (for some notion of normal form) can be viewed as representing 
the denoted proof in the most direct way possible, it is tempting to identify this 
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particular derivation with the proof it denotes." Given such an identification, the 
semantic significance of reduction can be formulated in a distinctive way. Namely, 
the process of reducing a derivation to normal form can be viewed as the process of 
assigning to the derivation its denotation, i.e. of interpreting it. 

In the contexts in which normal forms play this distinguished role we can say 
the following: As normal derivations are—or, more properly, represent in the most 
direct way—their own denotation, for them interpretation is just identity. In the case 
of arbitrary derivations, to interpret them is to reduce them to normal form. 


2.9 Validity 


As anticipated at the beginning of the chapter, in this and the next sections we will give 
a concise presentation of the approach to PTS developed by Prawitz and Dummett 
(see [12, 66—68, 70, 74]). 

The core of Prawitz-Dummett PTS is a definition of validity for derivations. The 
essential idea of the definition is that closed derivations that result by applying an 
introduction rule to one or more valid derivations are valid “by definition” (see also 
Sect. 2.3 above): more precisely, a closed canonical derivation will be said to be 
valid iff its immediate subderivations are valid. On the other hand, the validity of an 
arbitrary closed derivation consists in the possibility of reducing it to a valid closed 
derivation in canonical form. 

Due to the fact that some introduction rule, such as DI, can discharge assumptions, 
the immediate subderivation(s) of a closed canonical derivation need not be closed. 
Thus the validity of a closed canonical derivation may depend on that of an open 
derivation: thus the validity predicate should apply not only to closed derivations, but 
to open derivations as well. On Dummett and Prawitz’s definition, an open derivation 
is said to be valid iff every derivation that results from replacing its open assumptions 
with closed valid derivations of the assumptions (we will call these derivations the 
closed instances of the open derivation) is valid. This characterization reflects the 
idea that an open derivation denotes a function that takes proofs of the assumptions 
as arguments, and yields proofs of the conclusion as values. 

In Prawitz and Dummett’s original approach, ‘validity’ is meant as a distinguishing 
feature selecting a subset of linguistic structures that denote proofs from a broader 
class (analogously to what happens in truth-conditional semantics, where truth is a 
distinguishing feature of some, but not all, sentences of a language). Accordingly, 
Prawitz and Dummett propose to generalize the notion of derivation in a specific 
formal calculus to what they refer to as ‘arguments’. Given a language С, arguments 
are not generated just by a collection of introduction and elimination rules specified 
beforehand, but by arbitrary inference rules such as, e.g., 

AA(BAC) R A»2(B»5C) ADB 


1 Кэ ———— Кз 
В (Ал B)DC А 
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which may also encode intuitively unacceptable principles of reasoning, as in the 
case of R3. We will however refer also to arguments as derivations, keeping in mind 
that they are not to be understood as generated only using a fixed set of inference 
rules, but any arbitrary rule over £. (In the case of a propositional language £, what 
counts as an arbitrary rule can be made precise as in Definition A.1 in Appendix A.) 

Beside reductions to eliminate redundant configurations constituted by introduc- 
tion and elimination rules, further reduction procedures transforming derivations into 
derivations can be considered and the validity of a derivation is judged relative to the 
choice of a set of reduction procedures. 

Reduction procedures are taken to be rewriting operations on derivations gen- 
eralizing those associated with the elimination rules for the standard connectives. 
Only very minimal conditions are imposed on reductions, namely, that the result of 
reducing a given derivation Z must be a (distinct) derivation Z' having the same 
conclusion of Z and possibly fewer, but no more, undischarged assumptions than Z, 
and that satisfy a condition analogous to the weakening of the congruence condition 
used in the definition of 8,,-reduction in Sect. 2.7 (this is essentially a condition of 
closure under substitution, see [87] for more details). 

In Dummett and Prawitz's original approach, validity is also relative to an atomic 
system, i.e. to a set of rules involving atomic propositions опу (Dummett [12] refers 
to these as ‘boundary rules’), which specifies which deductive relationships hold 
among atomic propositions. Dummett and Prawitz seem to restrict these rules to 
what in computer science are called production rules, i.e. rules of the form 


Al ots An 
B 


for some n > 0 in which all A;s and В are atomic propositions.'* Examples of 
rules that might figure in an atomic system are the introduction rules (but not the 
elimination rule) for Nat given at the end of Sect. 1.3. Note that since rules with 
no premises are allowed, in some atomic systems it might be possible to give closed 
derivation of atomic propositions. 

We thus have the following definition: 


Definition 2.2 (Prawitz's validity of a derivation) A derivation Z is valid with 
respect to a set 7 of reduction procedures and to an atomic system S iff: 


e It is closed and 


— either its conclusion is an atomic proposition and it 7-reduces to a derivation 
of 5; 

— ог its conclusion is a complex proposition and it 7-reduces to a canonical 
derivation whose immediate subderivations are valid with respect to J and S; 


e or it is open and for all $ > S and J’ 2 J, all closed instances of @ (i.e. all 
derivations obtained by replacing the undischarged assumptions of Z with closed 
derivations that are valid with respect to 5” and J’) are valid with respect to 5” 
апа J’. 
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The definition is understood to proceed by induction on the joint complexity of the 
conclusion and the open assumptions of derivations. Thus, in order for the definition 
to be well-founded, introduction rules are assumed to satisfy what Dummett [12, 
p. 258] proposes to call the complexity condition: namely, that in every application of 
an introduction rule the consequence must be of higher complexity than all immediate 
premises and all assumptions discharged by the rule application. 

The process of checking the validity of a closed derivation can be described as 
follows: (i) If the derivation is not canonical, try to reduce it to a (closed) canonical 
one; (ii) if a canonical derivation is obtained check for the validity of its subderiva- 
tions: for closed subderivations repeat (i); for open subderivations check the validity 
of all their closed instances.'? 

Note that in order to show the validity of a given closed derivation, only its closed 
subderivations are reduced. The kind of reduction that derivations undergo is thus 
a generalization of the notion of weak reduction discussed in Sect. 2.7.29 Given а 
derivation, to show that it is valid one has first to compute a weak normal form of it 
(relative to the set of reduction procedures under considerations) and then one has 
to additionally show the validity of all open subderivations of the weak normal form 
obtained.?! 


2.10 Correctness of Rules 


In standard (i.e. truth-conditional) semantics the notion of truth is used to define 
logical consequence. Analogously, in Prawitz-Dummett PTS the notion of validity 
can be used to define what we will call the correctness of an inference rule (we 
therefore follow the terminology of [90], rather than of Prawitz, who uses ‘validity’ 
also for this notion). 

As for Tarski logical consequence is truth preservation, Prawitz proposes to define 
the correctness of an inference as preservation of validity: 


An inference rule may be said to be valid when each application of it preserves validity of 
arguments. (Prawitz [70], p. 165) 


More precisely, Prawitz defines the correctness of an inference rule (schema) as 
follows: 


Definition 2.3 (Prawitz’s correctness of an inference rule) An inference rule of the 
form 


A\ EE An 
B 


R 


is correct iff there is a set of reduction procedures ‚7 such that for every extension 
J’ of J, for every atomic system S and for any collection of closed derivations 
2,..., Jy, such that each J; is a derivation of conclusion A; (1 < i < n) that is 
valid with respect to J’ and S, 
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i Dn 
А\ EE Ал 
В 


is a derivation of B valid relative to J’ and 5. 
An inference rule schema is valid iff all its instances are valid. 


In the case of introduction rules, their correctness is “automatic”—in Dummett’s 
[12] terminology, they are "self-justifying". For example, the rule of conjunction 
introduction AI is correct iff it yields a closed valid derivation of its conclusion 
whenever applied to closed valid derivations of its premises. Suppose we are given 
two derivations Y, and 2 of A and B respectively that are valid relative to 7 and 
S. As the derivation 


Dı D 
A BI 
Ал В 


is а сІоѕеа canonical derivation with valid immediate subderivations, then it is valid. 
Thus, whenever we apply AI to closed valid derivations we obtain a derivation which 
is also valid (and this holds for any 7 and any S). Hence, AI is correct.2? 

Whereas the correctness of introduction rules is “automatic”, to show the cor- 
rectness of an elimination rule we need to make explicit reference to reduction 
procedures. Consider the left conjunction elimination AE;. Again, its correctness 
amounts to its yielding a closed valid derivation of its conclusion whenever applied 
to a closed valid derivation of its premise. Suppose we have a closed derivation of 
A ^ B that is valid relative to J and S. By definition of validity, this derivation 
J -reduces to a closed canonical derivation valid relative to J and S, i.e. to a closed 
derivation ending with an introduction rule whose immediate subderivations Ф| and 
2 are valid relative to J and $. By applying ^E; to it, one gets a derivation—call 
it Z— which is not canonical. But the reduction for conjunction: 


Ф| Ф 
D 
о = А8 En > i 
AAB AB, A 


allows us to reduce 2 to Ф|, which we know to be valid. Thus, the set of reduction 
procedures J consisting of ^; is such that whenever we apply AE, to derivations 
which are valid relative to any extension J’ of J and any S, we obtain a derivation 
which is valid relative to J’ and relative to S. Hence, the rule AE; is correct. 

The definitions of validity and correctness can be used to show the correctness of 
inference rules which are neither introduction or elimination rules. For instance, in 
the case ofthe rule R, mentioned in Sect. 2.9, one can show its validity by considering 
the set of reductions consisting of all instances of the following schema: 


Ф Ds 
Ф В C P 
A BAC Fan > 2 
Ал (Вл С) Б 
Р 


В 
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As observed by Schroeder-Heister [87], however, in contrast to the standard elim- 
ination rules and simple generalizations thereof, the reductions needed to justify a 
rule may need to make reference to other non “self-justifying” rules. For example, 
all instances of the following schema can be used to justify the rule А mentioned in 
the previous section: 


n 


[A] ААВ n 
jr [A] : 
ч BoC > 2 AAB ae 
MAD (BS OC) 2 BOC = ВВ 
Еа) 
Mee ял вурс 2! 


However, as the reduction is formulated using the elimination rules for conjunction 
and implication, to show the correctness of № one has to consider the set of reductions 
containing not only all instances of the schema just given, but \6;, \f2 and D£ as 
well. 

In fact, as observed by Schroeder-Heister [87] and by Prawitz [75] himself, the 
generalization of the notion of reduction is to some extent trivial as one can simply 
define the reduction for a rule R which is neither an introduction nor an elimination 
tule by “inflating” a derivation ending with an application of the rule in question 
with a derivation of the instance of the rule using the introduction and elimination 
rules. In the case of R, and R; these “inflating” reductions would be the following: 


2 
PD 
Ал (В 
Ал (Вл С) R > AE RE) ЛЕ? 
5 1 ZAC AE, 
n 
6 
Р 2 AAB кь, И 
Р pod AD(BDC) A 3E AAB AED 
сс E ВЭС "e 
(AA В) эс С 
вве. 


The rule А апа К» can then be shown to be correct using the set of reduction 
procedures consisting of the instances of the relevant “inflating” reductions together 
with the standard 6-reductions. Inflating reductions thus deprive the whole idea of 
using reductions to justify inference rules of its significance, apart from the basic 
case in which f-reductions are used to justify the elimination rules. 

Moreover, inflating reductions induce the expectation that introduction and elim- 
ination rules are complete with respect to correctness i.e. that if a rule is correct then 
it is derivable in NI (given inflating reductions, the correctness of a rule boils down 
to its being derivable from the introduction and elimination rules). The conjecture 
can be equivalently understood as expressing the fact that the elimination rules are 
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the strongest rules that can be justified given the introduction rules, in the sense that 
any correct rule is derivable from the introduction rules together with the elimination 
rules. 

Although completeness holds for the conjunctive-implicational language frag- 
ment, as shown by Piecha and Schroeder-Heister [60], it does not hold in presence 
of disjunction. The result does not hinge on the notion of reduction but rather on 
particular features of atomic systems. 

Whereas we will ignore the issue of validity in the first part of the present work, in 
the second part we will consider the possibility of applying the notion of validity to 
derivations of specific natural deduction calculi. As anticipated, in order to show that 
validity is a notion that applies to some, but not all derivations, it will not be necessary 
to consider derivations built up using arbitrary inference rules and evaluating their 
validity using arbitrary reductions as proposed by Prawitz and Dummett. 

Rather we will consider a calculus extending NI with specific rules characterizing 
paradoxical expressions, for which a clear notion of reduction is available. For this 
calculus, we will show that (an appropriately modified) notion of validity plays the 
role of selecting a subset of derivations which can be said to denote proofs of their 
conclusions. The definition of validity will however differ from the one of Prawitz 
and Dummett in significant respects. In particular, it will reject the relative priority of 
the notion of validity and correctness that underlies the Prawitz-Dummett approach. 
This aspect has been recognized as problematic already by Prawitz, as we detail in 
the next section. 


2.11 The Relative Priority of Correctness and Validity 


The definition of correctness of an inference as transmission of validity yields a 
perfect analogy between PTS and truth-conditional semantics. However, the resulting 
relationship between validity of derivations and correctness of inferences appears 
odd. One would naturally define the validity of a derivation in terms of the correctness 
of the inferences out of which it is constituted. In Prawitz-Dummett PTS it is rather 
the other way around. The validity of a derivation is independently defined in terms of 
its being reducible to canonical form. And the correctness of an inference is defined, 
we could say, in terms of the validity of the derivations in which it is applied. 

Prawitz himself acknowledges that this way of defining the validity of derivations 
and the correctness of inferences is not the most intuitive. Nonetheless, he stresses 
that although being constituted by correct inferences is rejected as a definition of 
validity, the following intuitive principle still holds: 
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(V) A derivation is valid if it is constituted by applications of correct inferences. 
In Prawitz’s words: 


If all the inferences of an argument are applications of valid inference rules [...], then it 
is easily seen that also the argument must be valid, namely with respect to the justifying 
operations [viz. the reduction procedures] in virtue of which the rules are valid. But this 
is not the way we have defined validity of arguments. On the contrary, the validity of an 
inference rule is explained in terms of validity of arguments (although once explained in this 
way, an argument may be shown to be valid by showing that all the inference rules applied 
in the argument are valid). (Prawitz, [70] p. 169) 


Unfortunately, the availability of reduction procedures is sufficient to show the 
correctness of an elimination rule only in what we may call ‘standard’ cases. Without 
undertaking the task of making the notion of ‘standard’ fully precise, it will be clear 
that whenever we have to deal with paradoxical phenomena we are not in a standard 
case. 

As aresult, the availability of reduction procedures will no more be sufficient for a 
rule to be correct in Prawitz’s sense. In the second part of the present work this will be 
taken as a reason to relax the definition of the correctness of an inference. The weaker 
notion of correctness of an inference to be introduced there will be shown to open 
the way to the application of PTS to languages containing paradoxical expressions. 
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1. One of the referees asks why validity applies to derivations, rather than to the 
sequents they establish (i.e. to derivability claims Г = A, or more generally, 
using the terminology of Appendix A, to rules). The reason is both historical and 
conceptual. Historically, as detailed below in Sect. 2.9, Prawitz [66] introduced 
the notion of validity as applying primarily to derivations, and only derivatively 
rules are said to be valid, namely iff there is a valid derivation establishing 
them. On the intensional conception of PTS here defended, the priority ascribed 
to derivations is no accident. Intensional PTS is not simply concerned with 
what is derivable from a given set of inference rules, but rather with how what 
is derivable can in fact be derived. We do not thereby wish to deny either the 
viability or the significance of an extensional conception of PTS in which validity 
primarily applies to what is established by derivations, rather than to derivations 
themselves. However, such an approach will not be pursued here. 

2. However, in line with Martin-Lof [43, 45], one may take proofs of the different 
kinds of atomic propositions to be generated (like those for logically complex 
propositions) by the availability of some basic constructions and operations. 

3. Thus Frege’s terminology, according to which functions and objects are unsatu- 
rated and saturated entities respectively, is reversed in the context of constructive 
type theory: dependent objects are unsaturated entities and the functions proving 
A > B are saturated entities. 
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We here understand ‘proof’ broadly enough so to also allow (closed) atomic 
propositions to have proofs. For example, using the rules for Nat depicted at 
the end of Sect. 1.3, one can easily construct a closed derivation of Nat SSO, 
which we regard as denoting a proof of this atomic proposition. Admittedly, the 
deductive content of this proof is rather thin, and in this case, ‘computation’ 
rather than ‘proof’ could be more appropriate. See also Note 2 above. 

As described in Note 12 to Chap. 1, in schematic derivations a formula in square 
brackets simply indicates an arbitrary number of occurrences (possibly zero) of 
that formula in assumption position. That is, the derivation Z we are considering 
is a derivations of B in which an undischarged assumption of the form A may 
occur a finite (possibly zero) number of times. Given the official definition of 
derivation and composition of derivations in Appendix A, we are implicitly 
assuming all occurrences of A to be labelled by the same numerical index, 
which is here being omitted. 

As remarked in Note 23 to Chap. 1, Dummett gives a more stringent definition 
of canonical derivations to which the present remark does not apply. (Thanks to 
a referee for stressing this point.) We wish however to point out that, although 
more stringent, when applied to closed derivations in NI^2, canonicity in Dum- 
mett's sense is a less stringent requirement than £-normality. That is, all closed 
B-normal NI^2-derivations qualify as canonical in Dummett’s sense, but the 
converse does not hold. Some closed NI^2-derivations that are canonical in 
Dummett’s sense are not 6-normal. This is due to the fact that Dummett allows 
local peaks to occur in his canonical derivations, namely in the subderivations 
depending on assumptions that are later on discharged, such as the subderiva- 
tions of the premises of applications of DI (see again Note 23 to Chap. 1). On 
Dummett’s canonical derivations cf. also Note 14 below. 

A setting in which the considerations developed in the present section can be 
developed in a formally rigorous manner is Martin-Lóf's [45] constructive type 
theory. In constructive type theory, the operations encoded by the inference rules 
are made explicit by decorating the consequence of each inference rule with a 
term constructed out of the terms decorating the premises by means of a specific 
operation associated with the rule, like this: 


t:A s:B t:AAB t:AAB 
(1,5): Ал В m(t): A m(t): B 
pal t:ADB si A 
es aots B 99 

Ax.t: ADB es 


That is, premises and consequences of inference are not propositions, but judg- 
ments of the form ft : A, whose informal reading is ‘t is a proof of A’. The 
result is that the conclusion of a derivation is decorated by a term which encodes 
the whole sequence of operations associated with each of the inferences con- 
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stituting the derivation. Whereas in standard natural deduction reductions and 
expansions, or the equations on derivations associated with them, are defined 
in the metalanguage, the richer syntax of constructive type theory permits to 
“internalize” them as a further kind of rule whose consequences are judgments 
of the form ft = s : A. The informal reading of judgments of this form is that t 
and s denote the same proof of A. The equality from which the reduction for 
implication is obtained by "orientation" becomes the following rule: 


5:А t:B 
app(Ax.t, s) = t(s/x): B 


D$ 


whose informal reading is as follows: if s is a proof of A and t is a proof of B 
depending on a proof of A (i.e. a function as unsaturated entity from proofs of A 
to proofs B) then the proof which one obtains by applying the course-of-values 
of t to s is the same proof that results by filling the slot of t with s. Although 
several parts of the material covered in the present work could be naturally 
reconstructed in the setting of intuitionistic type theory, we prerer to avoid this 
formalism in order to make the presentation accessible also to readers unfamiliar 
with it. 

8. These derivations correspond to the Church encoding of the numerals 0, 1 and 
2 in the A-calculus. The two derivations of the previous example correspond to 
the Church encoding of the Booleans. 

9. Both this example and the previous one rely in an essential way on the availabil- 
ity of the structural rules of weakening and contraction, i.e. on the availability of 
vacuous discharge and of simultaneous discharge of more copies of one assump- 
tion. The implicit availability of the structural rule of exchange also triggers the 
existence of distinct proofs of certain formulas. For example, formulas of the 
form (A ^ A) 2 (A ^ A) can be proved either by means of the identity function 
or by means of the function that maps every ordered pair of proofs of A onto the 
pair in which the order of the members has been exchanged. The fact that for 
some formulas there are distinct proofs is however independent of the availabil- 
ity of structural rules. For example, whenever А is some provable formula and 
Ф is a closed £-normal proof of A, the following derivations denote distinct 
proofs of (A D (A D B)) D (A D В), no matter which formula is taken for В: 


2 


и v 
AD (ADB) A AD (ADB) A 2 
DE у ADB 3E A 
ADB A or DE 
B iy 
(0) ADB DI (u) ADB >I 
0 “G55 By a AaB) 2! (AD (AD B) 3 (AD B) 


Note that in these two derivations no implicit appeal to any structural rule is 
made. Rather than to structural rules, the availability of more than one proof of 


a proposition A in NI^?! is closely connected to the number of occurrences of 
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10. 


11. 


12. 
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atoms of various polarity in A. As first proved by Mints [48], if a formula A 
in NI^?! is balanced (which means that each atom in A occurs exatly twice, 
once in positive and once in negative position) then A has a unique proof [see, 
for details, 122, Sects. 8.4 and 8.5.2—3]. For further references and for a recent 
investigation on the number of proofs of formulas in presence of disjunction, see 
Scherer and Rémy [84]. Thanks a lot to Paolo Pistone for a thorough discussion 
of this point and for providing the example given in this footnote. 

This result is what in the typed A-calculus corresponds to a corollary of Bóhm's 
theorem for the untyped A-calculus. 

It is worth stressing that the definition of the notion of isomorphism relies in an 
essential way on a generalization to open derivations of the ideas presented in the 
previous section. That is, it is not only assumed that distinct closed derivations 
in the same equivalence class denote the same proof, but also that distinct open 
derivations in the same equivalence class denote the same function from proofs to 
proofs. As detailed below in Sect. 2.7, this generalization is not uncontroversial. 
In calculi in which the replacement theorem does not hold and/or in which 
transitivity fails, one can define an equivalence relation A ~ B stricter than 
interderivability by requiring the interderivability of every pair of formulas C and 
D, such that D is obtained from C by replacing some (possibly all) occurrences of 
A with occurrences of B (Smiley [98] proposed this notion as the correct analysis 
of the intuitive notion of synonymy). Observe however that, like interderivability, 
this notion is also extensional in character, in that it is formulated without making 
reference to identity of proofs. In calculi in which a non-trivial notion of identity 
of proofs is available, it is therefore plausible that isomorphism is stricter than 
Smileyan synonymy. An example is the natural deduction system for Nelson’s 
[54] logic N4 (see [65], Appendix B, Sect. 2). This calculus is an extension of NI 
with introduction and elimination rules for the ‘strong’ negation of each kind of 
logically complex formulas. In N4, the interderivability of A and B alone does 
not warrant that A ~ B: A and В are Smileyan synonymous only if both A and В 
and ~ A and ~ В are interderivable (where ~ is the strong negation). The relation 
of P-equivalence for derivations of this calculus can defined by extending in the 
obvious way the definition for NI (the generalized n-expansions to be introduced 
in Chap. 3 below have to be used both in the case of the "positive rules" of 
disjunction and of the “negative rules" for conjunction). In №4, A and AA A 
are Smileyan synoynmous, but they are not 67-isomorphic, i.e. А ~ A ^ A but 


Bn 
A Æ A ^ A. (Note however that in N4 an equivalence relation on formulas A 
and B even stricter than isomorphism could be defined by requiring both A А В 


апа ~А E ^ B.) Another example of a calculus in which replacement fails is 
Tennant’s [113] Core Logic. In contrast to what happens in N4, in Core Logic no 
sufficient condition is known that warrants Smileyan synonymy. We conjecture 
however, that A and A ^ A are Smileyan synonymous in Core Logic as well. 
To show that A ^ A and A are not isomorphic in Core Logic would require the 
definition of an equivalence relation on derivations in Core Logic. (For some 
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22. 


difficulties that might be encountered, see the remarks at the end of Sect. 3.5 
and in particular Note 16 to Chap. 3.) If the resulting notion of identity proofs 
is close enough to the one resulting from £-equivalence in NI, A and AA A 
would fail to qualify as isomorphic in Core Logic as well. 

This is fully analogous to the role played by r-conversion in the untyped à- 
calculus—see Note 16 to Chap. 1. 

This weaker notion of 6-reduction is essentially the one advocated by Martin- 
Lóf [44], although with a partly different motivation. As stressed in Note 23 to 
Chap. 1 and in Note 6 to the present chapter, Dummett [12] gives a different 
definition of canonical derivations. For closed derivations in NI^2, being canon- 
ical in Dummett's sense essentially coincides with being normal with respect to 
the presenly discussed weakening of 6-reduction. In the present context, Dum- 
mett's claim that canonical derivations (in his sense) are the most direct way 
of establishing their conclusions can thus be taken to be the claim that closed 
derivations which are normal with respect to this weakening of 6-reduction are 
the most direct ways of representing the proofs they denote. As discussed in this 
section, this is tantamount to adopt an intensional conception of functions and 
to deny that all instances of 6-reduction are identity preserving. 

What we call B,,-normal derivations are what correspond to fully evaluated terms 
in type theory (see, e.g. [55]). 

The fact that the 7-equations express a principle of extensionality for functions 
is not in conflict with the claim of Sect. 2.6 that the account of harmony based 
on reduction and expansions is intensional. Reductions and expansions yield an 
intensional account of consequence (by allowing the possibility of establishing 
the same proposition by means of different proofs) and of meaning even though 
the criteria of identity for functions that one adopts are extensional. 

This is at least implicitly done by Dummett, as discussed at the end of Sect. 2.3 
above. 

A more general notion of atomic systems allowing rules of higher-level is dis- 
cussed in [59]. 

To check the validity of an open derivation with respect to S and ‚7 one has to 
check the validity of all its closed instances relative to all possible extensions 
of S and 7. As pointed out by one of the referees, it is therefore dubious that 
the notion of validity can be checked effectively. In some specific cases, it is 
however easy to show the validity of certain open derivations. A few examples 
are given in the next section. 

We speak of a generalization since weak reduction was defined for 8-reduction 
only, whereas here we consider an arbitrary set of reduction procedures. 

The resulting notion of validity could be strengthened, by requiring that all open 
subderivations of every weak normal derivation obtained from a given one should 
be valid. Since Prawitz considers arbitrary sets of reduction procedures, there is 
no warrant that confluence holds, and hence a given derivation may have several 
different weak normal forms (see [87], for details). 

It is worth stressing that, although Dummett refers to the introduction rules as 
‘self-justifying’, strictly speaking they are not correct by fiat, i.e. their validity 
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is not simply stipulated. Both Dummett and Prawitz agree in reducing their 
correctness to the notion of validity of arguments. However, it is true that given 
the role played by closed canonical derivations in the definition of validity, 
introduction rules always turn out to be correct “automatically”. 
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Chapter 3 A) 
Towards an Intensional Notion ше 
of Harmony 


Abstract In this chapter we discuss how the intensional account of harmony 
sketched in the first chapter can be developed in a systematic way for a class of 
connectives whose rules are obtained in a uniform way using an inversion princi- 
ple. To handle disjunction and disjunction-like connectives, the formulation of the 
expansions requires particular care. We discuss and compare two different ways of 
formulating the inversion principle and finally we investigate the prospects of devel- 
oping an account of harmony for connectives whose rules do not obey inversion, 
pointing at the weakness of the approaches proposed in the literature so far. 


3. Disjunction: A Problem for Stability 


The account of harmony in terms of reductions and expansions sketched in Sect. 1.3 
encounters a difficulty when one tries to apply it to the rules of disjunction: 


A B [A] [В] 


——^—\л 28: 
AVE ! AvB `°? ANB d C VE 


As in the case of conjunction, it is quite uncontroversial that the rules satisfy both 
aspects of the informal characterization of harmony, and in fact deductive patterns 
of the two kinds discussed, as well as reductions and expansions can be exhibited in 
this case as well: 


uy u2 7 
2 [Ai] — [A] i i 
| 2 7 УВ; і 
л 2 = жя (УВ) 
Al V Аз С С i 
(u1, u2) С УЕ C 
(fori = 1,2) 
2 uy иэ 
2 уп са Ae vu 
AVB Tanga AVE AVE 5! AvB ? 
uy, U2 AVE VE (vn) 
(with u; and u2 fresh for 2) 
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Besides these rules for disjunction (which in most formulations are common 
to both intuitionistic and classical logic), Dummett [12] discusses also those for 
quantum disjunction (more commonly referred to as lattice disjunction) v. The rules 
for this connective differ from those of standard disjunction in that the elimination 
rule comes with a restriction, to the effect that the rule can be applied only when 
the minor premises C depend on no other assumptions apart from those that get 
discharged by the rule application (we indicate this using double square brackets in 
place of the usual ones): 


—4 a = y Vv 
AVB 1 AVB 2 AVB C C VE 


Using the elimination rule for quantum disjunction one can derive from A v B 
less than what one can derive from A v B using VE. Thus, on the assumption that the 
standard rules for disjunction are in perfect balance, we expect the rules for quantum 
disjunction not to be in perfect harmony.! In particular, we expect the no less aspect 
of harmony not to be met.? That is, we expect the rules for V to be unstable.? 

However, and here is the problem, reductions and expansions are readily available 
in the case of quantum disjunction as well (again with double square brackets we 
indicate that no other assumption (apart from those indicated) occurs in Z, and %2): 


uy и? 
2 [A] 10] "i 
LS д, Ф ĝi t4 (fori — 1,2) 
A1 V A2 ý C C _ Zi 
(u1, u2) C VE C 
2 и] u2 
S AVB "EE: A iE Xm 
AVB (ur, u2) OY УЕ LE 
AVB 


(with u; and uz fresh for 2) 


Observe in particular that the restriction on VE is satisfied by the applications of 
the rule in the expanded derivations and thus that, though unstable, the restricted 
elimination rule allows one to derive from A V B no less than what is needed in 
order introduce A v B back again. 

Most authors (see, e.g. [4, 103]) have taken the modest stance of regarding insta- 
bilities of this kind as too subtle to be ruled out by the existence of expansions. Here 
we will argue against this modest stance, by showing that, once properly formulated, 
expansions are perfectly capable of detecting instabilities of this kind. 
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3.2 A “Quantum-Like” Implication 


Before reformulating the expansion pattern for disjunction, we would like to point 
at some independent evidence in favor of the view that the existence of expansions 
should rule out instabilities of this kind. In so doing, we hope to dispel the possibly 
mistaken impression that our solution to the problem of quantum disjunction is 
merely ad hoc. 

Evidence in favor of our bolder stance towards stability and expansions arises 
when one considers a restriction on DI analogous to the one yielding quantum dis- 
junction also briefly discussed by Dummett [12, p. 289] as a case of instability. Let 
D be the “quantum-like” implication connective governed by the following rules: 


[A] 
ADB 

where the introduction rule is restricted to the effect that it can be applied only when 
the premise B depends on no other assumptions apart from those that get discharged 
by the rule application. 

The restricted introduction rule sets higher standards for inferring a proposition 
of the form A D B than those set by DI to derive a proposition of the form A D В. 
Thus, on the assumption that DE is in perfect harmony with the standard introduction 
rule, we expect DE not to be in perfect harmony with the restricted introduction rule. 
In particular, as the restricted introduction rule sets higher standards to derive an 
implication, we expect that using DE we cannot derive from A B all that is needed 
to introduce A B again using its introduction rule. In other words, we expect also 
in this case the no less aspect of harmony not to be met. That is we expect the rules 
for D to be unstable, the kind of instability at stake being the same as the one flawing 
the rules for У. 


As in the case of V, in the case of D we have a reduction readily available which 
shows that—as expected—the no more aspect of harmony is satisfied: 


и 
[А] 2 
2 g [А] 
7 
(и) ———- 51 2 2 
ADB A _ B 
B ЭЕ 


Moreover, it is easy to see that the expansion pattern for standard implication does 
not work for quantum-like implication, as the application of DI would violate the 
restriction that the premise B depends on no other assumptions than the one that get 
discharged by the rule: In the expanded pattern В would depend not only on A but 
also on all assumptions on which A D B depends: 


GQ 


и 
2 ADB 
— , does not expand to зав DE 
5B B . 
(и) ———— 51 
ADB 
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The requirement that it should be possible to equip the rules with both reductions 
and expansions is thus capable of detecting the instability of the rules of quantum- 
like implication. We take this as a reason to consider an alternative pattern for the 
expansion of disjunction, namely one capable of detecting the disharmony induced 
by the restriction on the quantum disjunction elimination rule.? 


3.3 Generalizing the Expansions for Disjunction 


The expansion pattern for disjunction (V7) we considered above—which was first 
proposed by Prawitz [66]— gives the instructions to expand a derivation in which the 
disjunctive proposition figures as conclusion of the whole derivation. 

The idea behind the alternative pattern is that an expansion operates on a formula 
which is not, in general, the conclusion of a derivation, but on one that occurs at some 
point in the course of a derivation. Consider a derivation Z in which the formula 
A v B may occur at some point. Such a derivation may be depicted as follows: 


[74 
[A v B] 


2" 
C 


@ 


—that is, it may be viewed as the result of plugging a (certain number k > 0) of 
copies of a derivation Z' of A v В on top of a derivation Z" of C depending on (К 
copies of) the assumption A V B, possibly alongside other assumptions Г. 

It is certainly true that Prawitz's expansion (V7) can also be used to expand a 
derivation 9 of this form: To expand Z, we can apply Prawitz's expansion to the 
upper chunk Y of Z (in which A v B figures as conclusion), and then we can plug 
the result of the expansion on top of the lower chunk Y” of Z, thereby obtaining the 
following: 


a 2 vI 2 vI 
ТОУ AVB AVB AVB VE 
1, U2 [Av B] 
0"! 
С 


It is however possible to define an alternative procedure to directly expand the 
whole of Y, namely the following: 


и u2 
2 А VI B vi 
[A v B] МА [A v B] [A v B] 
ч d / 7, 
2" D D 2 
C AVB C C (Vg) 
(u1, U2) E VE 


(with иу and из fresh for 9’) 
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In the alternatively expanded derivation, the application of the elimination rule 
VE is postponed to the effect that its minor premises are not the two copies of A v B 
obtained respectively by VI, and VI, (as in Prawitz’s expansion), but rather two 
copies of C which are the conclusions of two copies of the lower chuck 2” of 2 
that now constitute the main part of the derivations of the minor premises of the 
application of VE. 

This alternative pattern, first proposed by Seely [97], is a generalization of 
Prawitz's expansion pattern: Each instance of Prawitz's pattern (V7) corresponds 
to an instance of the alternative pattern (v) in which the lower chunk 2” of the 
derivation Z is "empty" i.e. it just consists of the proposition A v B. 

Moreover, it is easy to see that we cannot replace v with v in the above pattern 
for generalized expansions, since the application of VE in the expanded derivation 
would violate the quantum restriction: The minor premises C would not depend only 
on the assumptions of the form A and B that get discharged by the rules, but also on 
all other undischarged assumptions of 2”: 


n m 


g' A TI B = 
[A V B] [A V B] [A V B] 

gn does not expand to g' 2" 2" 

C (п, т) AVB ©: С VE 


(with п and m fresh for 2) 


Thus, quantum disjunction does turn out to be unstable (in accordance with what 
we would expect), provided that stability is understood as the existence of generalized 
expansions. 

What the alternative expansion expresses is a generalization of the no less aspect 
of harmony that could be roughly approximated as follows: 


The elimination rule allows one to derive no less than what is needed to derive all conse- 
quences from a logically complex proposition of a given form. 


Starting from the alternative formulation of harmony given by Negri and von Plato 
[53]: “whatever follows from the direct grounds for a proposition must follow from 
that proposition.” (see also Note 5 to Chap. 1 above) one may propose the following 
as the proper way of understanding harmony: 


Harmony: Informal statement 1 What can be inferred from the direct grounds for 
a proposition A together with further propositions U should be no more and no less 
that what follows from A together with Г. 
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3.4 Harmony: Arbitrary Connectives and Quantifiers 


Prawitz [69] first proposed a general procedure to map any arbitrary collection of 
introduction rules onto a specific collection of elimination rules which is in harmony 
with the given collection of introduction rules. We will refer to such procedures 
as inversion principles. Prawitz's procedure has been refined by Schroeder-Heister 
[85, 86, 94] in a deductive framework that generalizes the key ingredients of standard 
natural deduction calculi called the calculus of higher-level rules. We will therefore 
refer to the Prawitz-Schroeder-Heister procedure to generate elimination rules from 
a given collection of introduction rules as PSH-inversion. 

The details of the calculus of higher-level rules and a more general presentation of 
PSH-inversion for rules of propositional connectives will be given in the Appendix A 
(see in particular Sect. A.9). In the present section, we informally give these results 
for the simplest case which does not require rules of higher level, and we suggest how 
PSH-inversion could be generalized to cover rules for arbitrary first-order quantifiers 
as well. 

In this chapter we will assume T to be an n-ary connective, and }I to be a collection 
ofr > 0 distinct introduction rules for + of the following form: 


Bx ae Bin, 


I 
Hn cud ш 


satisfying the following condition: for all 1 < k < r, either mą = Oorforalll < j < 
m, there is an 1 < i < n such that By; is syntactically identical to A;. (Introduction 
rules of a more general kind are discussed in Appendix A, see in particular Sect. A.9.) 


Definition 3.1 (PSH-inversion) Let + and 1I be as above. We indicate with PSH(7I) 
the collection of elimination rules containing only the following rule: 


[Bii] ... [Bim] [8,1]... [Brm,] 


T(Al,..., An) C 
C 


TE?SH 


where C is distinct from each A;. 
We say that t is a PSH-connectives in a calculus K iff K includes TI and PSH(TD, 
and f does not occur in any other of the primitive rules of K.’ 


Let К bea calculus in which + is a PSH-connective. In every K-derivation, one can 
get rid of any maximal formula occurrence governed by T as follows (we abbreviate 
TCA1, ..., An) with T): 


ul Ulm, Hp] Urmy 
De Zn, [Bii]. ... [Bim] [Ba] ..- [Brm,] 
Bi e. В a 2 2; 
=== 
t C 25s C 
(u11, s Urm, ) С TEPSE 
tk 
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Zi Dkm; 
[Bri] n. [Bim] 
2, 

C 


Moreover, given a K-derivation Z' of C depending on some assumptions of the form 
+(A,,..., An) and a K-derivation Z of T(Aj,..., An) we can define the follow- 
ing generalized n-expansion (again we abbreviate (А, ..., A4) with T; freshness 
conditions on the discharge indeces will be left implicit henceforth): 


ull Ulm, Ur] Urmy 


@ Вур ... Bim, " Bri o. Brn, + 
—————————— 1l — - 
[По [t] [n] ' 
gf 2 2 2 
C C 
e (u11, os Urm) С ЕРЭН 


The disjunction rules of NI are obtained by instantiating these schemata for r = 2 
and ту = m» = 1. To give a further example, for r = 1 and m, = 2 we obtain the 
well-known variant of the rules for conjunction in which the two elimination rules 
of NI are replaced by the so-called general elimination rule for conjunction’: 


[A][B] 


Al AAB С 


PSH 
С AE 


for which we have the following reduction and (generalized) expansion: 


uy ua 7 
E [AIL] aA D 
А В DA £ [A] [В] (Ap 
Алв ^N C 2 
(u1, u2) C AEPSH C 
ul и? 
D B 
—— Al 
[AAB] m [АЛБ] 5 
Б 2 д! (Ang 9) 
С (u1, u2) Ang C E AEPSH 


We intend the schema to cover also the limit case of m = О that gives us the 
standard intuitionistic rules for L: 


no introduction — LB 


C 


for which we have no reduction but the following (generalized) expansion: 
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@ 
[^ 
шо от 
/ наси 
2 c LE 
C 


As we detail in the Appendix, in the setting of Schroeder-Heister's calculus of 
higher-level rules the above schemata cover also the cases in which the В; ;ѕ are not 
formulas (i.e. rules of lowest level), but rules of arbitrary (finite) level? For example, 
take DI to be the collection of introduction rules consisting only of the standard 
introduction rules for implication DI: 


[A] 
B 


ADB >! 


The collection of elimination rules PSH(DJD) consists of the following rule: 


[A => B] 
ADB C 
C 


DEPSH 


Using the notation that is introduced in the appendix, the reduction associated with 
these rules can be depicted as follows: 


и2 
2 [A => B] А 2 
В 2 > [А = В] 
rS we c 


SEPSH 


To give the reader at least an informal clarification of the notation involved in the 
reduction, we observe the following. A derivation of the rule A => B is equated by 
definition with a derivation of B from A, thus the derivation Z of B from А is ipso 
facto a derivation of А > B. The result of substituting the derivation 2 of A > B 
for the rule assumption A => В in Z' can be informally described as the derivation 
which results by removing all applications of the assumption rule A => B in Z' and 
inserting Z to fill the gap, i.e. by successively replacing all patterns of the form on 
the right with patterns of the form on the left. 


A [A] 
в А 2 В Z 
B 


Observe that depending on the number of copies of the assumption A in 2 and the 
number of applications of А => B in Z/, the operation requires a quite involved 
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transformation already for a rule of almost lowest level such as A — B. For exact 
definitions (covering rules of arbitrary level) see Appendix A. 
The (generalized) expansion is the following: 


и? 
2 s ASB 
[A D B] ng (а) TAS BD DI 
2 2 g' 
C 
m) — C. вези 


It should be clear that the schemata above can be generalized to apply to more 
general collections of introduction rules which may not only be of arbitrary high 
level but which may also contain propositional quantification as in Schroeder-Heister 
[94]. A generalization covering also first-order quantification is possible too and 
expectedly straightforward. We limit ourselves to discuss a (hopefully suggestive) 
example, the rules characterizing a binary quantifier encoding the 7 corner of the 
traditional square of oppositions ("Some A are B"). The collections of introduction 
and elimination rules / and PSH(7I) consist of the following two rules respectively: 

[AQ /x)]LBG//x)] 
A(t/x) B(t/x) п L(A. B) C 


Ix(A, B) C IE 


(where y is an eigenvariable) 


Also for these collections of rules we have a reduction and a (generalized) expan- 
sion following the pattern of those of the rules of conjunction with the elimination 
rule in general form: 


2 2; [AQ/:0]EB 720] A % 
A(t/x) B(t/x) FD (y[x) d A [B(t/x)] 
Т, (А,В) l C #'(/х) 
(ит, U2) 5 ТЕ C 
ul и? 
P Абу) Ву) | 
L(A, B) т П (А, В)] 
2 Я D g 
I, (A, B 
С tuia ( ) C т 
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3.5 Stability and Permutations 


When calculi containing connectives with rules obeying PSH-inversion are consid- 
ered, such as the full calculus NI, one usually considers further conversions besides 
reductions and expansions. A typical example of further conversions are permuta- 
tive conversions. The result of applying such conversions is a change in the order 
of application of certain rules within derivations. Permutative conversions were first 
introduced by Prawitz [65, Chap. IV] with the goal of extending the subformula prop- 
erty of 6-normal derivations to the whole of NI. Although 8-normal (and f,,-normal) 
derivations in NI are canonical (i.e. Fact 3 holds for NI), 8-normal derivations might 
contain occurrences of formulas which are neither a subformula of the undischarged 
assumptions nor of the conclusion. The following derivation in NI displays this fact 
(the example is taken from [26]): 


1 1 2 2 
A A AI A A AI 
AVA AAA AAA 
(1, 2) ААА VE 
AAA ABI 
A 


The failure of the subformula property is triggered by the fact that, due to its peculiar 
form, the application of VE “hides” the fact that the formula A ^ A is introduced (in 
both derivations of the minor premises of the application of VE) and then eliminated. 

Prawitz [65] characterized the “hidden” redundancies of this kind in МІ as maxi- 
mal segments. Segments are defined as follows: 


Definition 3.2 А segment (of length п) in a derivation is a sequence of formula 
occurrences А, ..., A, of the same formula A such that 


1. for n > 1, for all i < n А; is a minor premise of an application of VE with 
conclusion А;+1. 

2. A, is not the minor premise of an application of VE; 

3. A, is not the consequence of an application of VE. 


Note that in the above derivation the only two segments of length 2 are those con- 
sisting (respectively) of one of the two minor premises followed by the consequence 
of the application of VE. АП other formula occurrences in the derivations constitute 
segments of length 1. 


Definition 3.3 A segment A,,... A, is maximal iff A, is the consequence of an 
application of an introduction rule or of LE and A, is the major premise of an 
application of an elimination rule.!° 


In the above derivation both segments of lengths 2 are maximal. Note that maximal 
formula occurrences in NI^?” are a limit case of maximal segments (i.e. maximal 
segments of length 1). 

Whereas applications of -reductions allow one to get rid of maximal formula 
occurrences (i.e. maximal segments of length 1), permutative conversions can be 
used to shorten the length of maximal segments. The permutative conversions for 
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disjunction (which we will indicate as Vy) can be schematically depicted as follows 
(in the derivation schemata, (9) indicates the possible presence of minor premises 
in TE, where +E stands for the elimination rule of some connective T)! !: 


A DÙ 4 Ф 23 
AvB C C vy 2 C (2) Cc (2) v 
ge yE (9) P ug D ТЕ D ТЕ (vy) 
ТЕ D VE 
D 


An application of (Vy) to the above derivation yields the following one: 


1 1 2 2 

A A, A A ug 
AAA AAA 

AVA a. 5B A E 

(1,2) " vE 


which by two applications of ^, reduces to 


1 
AVA A 

1,2 

(1, 2) РТ УЕ 


DN 


Counterexamples to the subformula property in NI are triggered by applications 
of LE as well, as shown by the following derivation: 
d: 
ADB LE A 
B 


DE 


which contains an occurrence of a formula—viz. A > B—which is not a subformula 
of either the undischarged assumptions or the conclusion. This formula occurrence 
constitutes a segment which qualifies as maximal according to Definition 3.3. Using 
the following permutative conversions for | one can get rid of such segments": 


м 2 
“їн кооз (Ly) 
С 2; (2) +B D LE 


In NI, By-reduction is not only weakly normalizing, but also confluent and 
strongly normalizing. Moreover, by generalizing the notion of track used for NI^2 
(see Sect. 1.5 above), it is possible to establish a result analogous to Fact 1, from 
which a result analogous to Fact 2 follows immediately, i.e. the subformula property 
for By-normal derivations in the full calculus NI.? 

For future reference we observe that if one restricts oneself to the calculus for 
the (5, 1}-language fragment, to which we will refer as NI>+, there is no need to 
modify the notion of track used for NI^” and the subformula property for 6y -normal 


derivations follows from the following: 


Fact 4 (The form of tracks) Each track A, ... А;—1, Ai, А;+1,... An ina By-normal 
derivation іп NI>+ contains a minimal formula A; such that 
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e Ifi > 1 then A; (forall 1 < j < i) is the premise of an application of an elimina- 
tion rule of which А уфт is the consequence and thereby Aj, is a subformula of 
Aj. 

° fn > i then A; is the premise of either an application of LE or of an introduction 
rule. 

e If n > i then A; (for all i < j < n) is the premise of an application of an intro- 
duction rule of which A + is the consequence and thereby A ; is a subformula of 
A "SE 


Proof For a derivation to be B y -normal, in each track all applications of elimination 
rules must precede all applications of introduction rules, and if LE is applied in the 
track, its consequence is either the last element of the track or the premise of an 
introduction rule. This warrants the existence of a minimal formula in each track. 
Since a track ends whenever it "encounters" the minor premise of an application of 
DE, the subformula relationships between the members of a track hold (as it can be 
easily verified by checking the shape of the rules of NI2-). oO 


It is worth observing that permutative conversions can be “simulated” using gen- 
eralized n-expansions and f-reductions. In particular, in the case of (Vy) one can 
obtain the derivation on the right-hand side from the one on the left-hand side as 
follows. First apply a generalized expansion to the derivation on the left-hand side 
of (v y) by instantiating in the schema for the generalized expansion (v) Z' with 
J, and Z" with 


Ф Ds 
AVB С C VE 
C (2) 
TE 
D 
thereby obtaining the following derivation: 
uy u2 " 
А % Ds В % DB: 
AvB С С VE AVB С С VE 
Zi C (2) +E С (2) +E 
AVB D D 
(u1, u2) VE 


in which the two rightmost occurrences of A v B constitute two local peaks. Their 
reduction yields the derivation on the right-hand side of (y v). (In the case of L the 
permutation is just an instance of the generalized n-expansion; for other connectives, 
see Sect. 3.7 below.) 

The relevance of permutations to harmony and in particular to stability was already 
pointed out by Dummett [12] and has been recently stressed by Francez [17]. The 
fact that permutative conversions can be recovered from generalized expansions 
thus provides on the one hand further evidence for the significance of permutative 
conversions for an inferential account of meaning, and on the other hand it offers 
further reasons to view generalized expansions as the proper way to capture stability. 
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Actually, using the alternative expansion pattern one can recover a more general 
form of permutation, which we indicate as v y,-conversion, in which any chunk of 
derivation (and not only applications of elimination rule) can be permuted-up across 
an application of disjunction elimination [97]: 


Zi D D 2 DB 
AvB C C P [C] IC] 
[C] XE. dq Zi 2 22 (Му) 
2 AvB D D Jg 
D D 


Conversely, this general form of permutation coupled with Prawitz's simple form 
of expansion is as strong as the alternative form of expansion. More precisely, 
the equivalence relation induced by f-reductions, and generalized 7,-expansions 
is equivalent to the one induced by f-reductions, Prawitz's n-expansions and the 
generalized permutative y,-conversions ([97], for a proof see [40]). 

As it has been recently established [83], 87j,-equivalence (or equivalently nyg- 
equivalence) is the maximum non-trivial notion of equivalence in the full language 
of NI. The notion of 87,-isomorphism (see Sect. 2.5) has been shown to decidable, 
but only in the absence of L, whereas it is still an open question whether ng- 
isomorphism is decidable in the full language of NI, though it is known that it is not 
finitely axiomatizable [33]. 

In contrast to By-reduction, By, reduction is neither strongly normalizing nor 
confluent [1, 21, 40]. Due to the lack of confluence, it is thus difficult to make sense 
of the idea that 8 y,-normal derivations in NI represent proofs in the most direct 
way possible. The same proof may be represented by more than one f y,-normal 
derivation. Hence, without further ado there is no criterion of selecting one among 
the normal derivations belonging to the same equivalence class as “ће” most direct 
way of representing a given proof.!* It therefore seems that in the case of the full 
language of NI it is hard to reconcile, on the one hand, the idea that maximality is the 
criterion to select the "correct" way of analyzing identity of proofs and, on the other 
hand, that conversions are means to transform a less direct representation of a proof 
into a more direct one. For these reasons, Girard famously referred to permutative 
conversions in NI as the 'defects of the system' (see [26], Sect. 10.1). 

We conclude this section by observing that some authors (notably [63, 110]) 
argued in favour of calculi in which all elimination rules follow the pattern of dis- 
junction elimination (Tennant refers to rules of this form as 'parallelized elimination 
rules’, while von Plato as “general elimination rules’). However, to avoid the com- 
plications of rules of higher level, the following equivalent? rule is adopted instead 
of the PSH-elimination rule for 2: 


ADB A С 
C 


The resulting natural deduction calculus, to which we will refer as NI,, bears 
a close correspondence to sequent calculus (in fact, a much closer correspondence 
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than the original NI) and as such is particularly suited for automated proof search 
(see, e.g., [113], Sects. 2.3.4 and 2.3.7). 

Forreasons analogous to those discussed in connection with the rule of disjunction 
elimination in NT, in NI, permutative conversions are associated to all elimination 
rules. As in the case of disjunction, one can distinguish between permutative con- 
versions involving only elimination rules (analogous to Vy above) and permutative 
conversions of a more general form (analogous to V yg). 

As in the case of NI, B y-reduction in NI, is strongly normalizing and confuent 
(see [37] for a proof of strong normalization for the disjunction-implication fragment 
and [36] for a proof of confluence for the implication fragment alone; Matthes [46] 
claims that the proofs carry over to the full calculus), and the P y -normal derivations 
can be concisely described as those derivations in which all major premises of elimi- 
nation rules are in assumption position (or, in Tennant's terminology ‘stand proud’). 
Neither strong normalization nor confluence however hold for the more general kind 
of permutative conversions. 

Observe finally, that the adoption of elimination rules in general form jeopardizes 
the idea that normal derivations are the most direct way of denoting proofs already 
in the purely conjunctive fragment. For example, the following NI^2 f-normal 
derivation: 


AAB CAD AAB CAD 
AE AE ——— AE ——— AE 
A | es ! B $ D i : 
AAC BAD 
ЛІ 


(Ал С) л (В л р) 


corresponds to ће following two distinct f y-normal derivations in the calculus in 
which AEpsy replaces AE; and ЛЕ»: 


AAC Al BAD Ka 
АЛВ (AAC) л (Вл р) 
(m1, m2) AEpsu 
ae CAD (AAC)A(BA Р) AE 
io (AA C)A(BAD) pm 
ті ni m» n2 
us AI B Al 
AAC BAD AI 
CAD (AAC) л (Вл Р) 
(n1, n2) AEpsu 
AAB (AA С) л (Вл Р) 
(m1, m2) AEpsy 


(AAC)A(BAD) 


Although they are both B y -normal (and hence they are not 6 y -equivalent), these two 
derivations are y,-equivalent: each can be obtained from the other by exchanging 
the order of the last two applications of ЛЕрвн. 

The two derivations are two different representations of the same (function from) 
proof(s of the undischarged assumptions to proofs of the conclusion). However, 
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neither of the two derivations can be said to represent their common denotation more 
directly than the other one. 

In this sense (although maybe not in other respects), the natural deduction cal- 
culus NI^?” can be deemed superiour to the conjunction-implication fragment of 
NI,: the syntax of NI^? “filters out" inessential differences such as the order in 
which inference rules are applied within derivations by enabling a more canonical 
representation of proofs.!° 


3.6 The Meaning of Harmony 


As argued in Sect. 2.3, collections of introduction rules play the role of definitions. 
This can be understood as meaning not only that each introduction rule for ї expresses 
a sufficient condition to prove a proposition having + as main operator, but also that 
these conditions are jointly necessary. The joint necessity of these conditions is not 
captured by any of the introduction rules, but it is the content of the PSH-elimination 
rule. That is, the content of the PSH-elimination rules is that the introduction rules 
for a given kind of propositions encode all possible means of constructing proofs of 
propositions of that kind. Equivalently, the content of PSH-elimination rules is that 
there are no other means of constructing proofs of their major premises other than 
those encoded by the corresponding introduction rules. 

The PSH-elimination rules thus play the same role of the final clauses of induc- 
tive definitions. This is best understood by resorting again to the analogy between 
numbers and proofs that was developed in the previous chapter. In the case of the 
natural numbers, their inductive definition consists of the following three clauses: 


(i) O is a natural number; 
(ii) if n is a natural number then Sn is a natural number as well; 
(11) nothing else is a natural number. 


If we look again at the rules for the predicate ‘x is a natural number’ given at 
the end of Sect. 1.3, the first two clauses are captured by the two introduction rules, 
whereas the third is captured by the elimination rule. The content of the latter is 
namely that in order to infer that a certain property C (x) holds of a natural number 
t, itis enough to show that it holds of 0 and that if it holds of a number, it holds of 
its successor as well. 

In the case of disjunction, the rule VE tells us that what follows from both A and 
B follows from A v B as well. What warrants that a proof of C can be obtained given 
a proof of A v B and given means of obtaining a proof C from either a proof of A 
or a proof of B? The answer seems to be that the only way of obtaining a proof of 
A V B is by applying one of the two operations (usually called injections) associated 
with the introduction rules for v to a proof of A or a proof of B. 

We wish to stress that neither the final clause of the inductive definition of natural 
numbers nor the elimination rule for Nat warrant that every natural number can 
be reached by 0 using the successor function in a finite number of steps. In fact, the 
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existence of non-standard elements of the set of natural number is compatible with the 
introduction and elimination rules, since there may be non-standard natural numbers 
which are the successor of some other (again non-standard) natural number." 

Moreover, the formulation of the inductive principle encoded by the elimination 
rules for a given kind of propositions does not require that the inductive process 
specifying how to construct the set of proofs for that kind of propositions satisfies 
any well-foundedness condition. 

The understanding of PSH-elimination rules as final clauses of inductive defini- 
tions was first proposed by Martin-Lóf [42] and it constitutes one of the cornernstones 
of constructive type theory. Hallnàs [29] and Hallnàs and Schroeder-Heister [30, 31] 
explored the possibility of extending Martin-Lóf's ideas to cover the case of non- 
wellfounded inductive definitions in the context of logic programming. In the second 
part of the present work the conception of PTS developed in the previous chapter will 
be used to connect the understanding of harmony described in the present section with 
the analysis of paradoxical expresssions in the setting of natural deduction proposed 
by Prawitz [65] and Tennant [109]. 


3.7 Comparison with Jacinto and Read's GE-Stability 


Jacinto and Read [34] have also recently pointed out the need of generalizing the 
usual formulation of the no less aspect of harmony in order to properly capture 
stability. In particular, they refer to the original formulation of the no less aspect of 
harmony as ‘local completeness’ (thereby following [58]) and propose to replace it 
in favor of what they call ‘generalized local completeness'. 

Rather than cashing out generalized local completeness by formulating gener- 
alized expansions as we did, Read and Jacinto formalize this notion as a complex 
requirement on derivability. Remarkably, to establish the generalized local complete- 
ness of the collections of introduction and elimination rules that they consider, they 
show how to construct derivations that closely resemble the (generalized) “expanded” 
derivations obtained by our generalized expansions. Thus, although the work of Jac- 
into and Read is not based on the idea of transformations on derivations or identity 
of proofs, the two approaches are quite close to each other. 

In this section we explore the possibility of recasting Jacinto and Read's account 
of generalized local completeness using generalized 7-expansions. Some difficulties 
will be encountered, whose source is that Jacinto and Read (following [77, 78]) 
consider elimination rules whose form differs from the one discussed in the previous 
sections of this chapter. 

We wish to stress however that the considerations to be developed below do not 
undermine the results of Jacinto and Read. Rather, these considerations show how 
their results can be given an intensional reformulation by taking the notion of identity 
of proofs into account. 

To spell outthe issue in a more precise way, we begin by presenting the elimination 
rules considered by Jacinto and Read: 
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Definition 3.4 (JR-inversion) Let t and +I be as in Definition 3.1. 
We indicate with JR(1D) the collection of elimination rules consisting of [ [,_ mx 
rules, each of which has the following form: 


Lf ()] Lf G)] 
tL... An) C = m (JR) 
E ei 


where f, is the Ath choice function that selects one of the premises of each of the 
r introduction rules of f, that is foreach 1 < k <r, fa(k) = By for some 1 < j < 
т! and where C is distinct from each А;. 

We say that + is a JR-connectives in a calculus K iff К includes +I and JR(TD, 
and + does not occur in any other of the primitive rules of K.'? 


When each rule in a collection of introduction rules 11 has at most one premise 
(as in the case of disjunction), then PSH-inversion and JR-inversion yield the same 
collection of elimination rules, i.e. PSH(1I) = JR(1TD). Not so if at least one of the 
introduction rules has more than one premise. For example, in the case of conjunction 
we obtain yet another variant of the collection of elimination rules consisting of the 
following two rules: 


AAB C 
C 


AAB C 


ABJ? " 


AES® 

The definition of reductions to get rid of local peaks is straightforward in the 
case of JR-elimination rules (although one has to specify one reduction for each 
elimination rule): 


и 
a 2» [Ai] 2 
Al А2 2 g ТАЛ (for i = 1,2) (AB?) 
02А P = i 
Ai A Аз С JR 2 
(и) С ЛЕ; С 


In establishing that the introduction rule for conjunction AI and the JR-elimination 
rules AET* and AE5* satisfy the condition for generalized local completeness, Jacinto 
and Read show how to construct the following derivation: 


uj u2 


[aag] ^ 
2 Д 
G 
X (u1) AAB С C AE ® 
(uz) ^^ AEj* 


Although they do not define an operation of expansion, one could argue that they 
could have defined it, by positing the derivation just given as what one obtains by 
expanding the following: 
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However, there is no principled reason why the expansion of this derivation should 
not rather be the following: 


uy u2 


piam] ^ 
D gr 
G 
а-а. АЛЕ — E. ge 
u) A AER 


in which the elimination rules are applied in a different order. 

By looking at more complex collections of introduction rules, one immediately 
realizes that the problem is not just the order in which the different elimination 
rules are applied. Consider the collection of introduction rules OI for the quaternary 
connective © consisting of the following two rules: 


A B С D 
———————— ol І 
(A, B,C, D) O" OA, B,C, D) © 


The collection of elimination rules JR(OI) associated with OI by JR-inversion 
consists of the following four rules: 


[A] IC] [A] [D] 
_ E E OE _ E E OEF 
[В] [C] [В] [D] 
_ Е Е ові 2000 Е Е ову 


Using Jacinto and Read’s recipe, опе can cook up the first derivation displayed in 
Table 3.1 (in which ©(A, B, C, D) is abbreviated with ©). However, in this case also 
there is no principled reason to claim that a derivation of the form: 


should expand that way rather than, say, as in the second derivation of the table, where 
not only the order, but also the number of applications of the different elimination 
rules changes. By considering connectives with more complex introduction rules, the 
situation quickly becomes unwieldy as to the number of possible ways of expanding 
a given derivation. 

In light of this, it is not obvious how to cash out Jacinto and Read’s generaliza- 
tion of the no less aspect of harmony in terms of (generalized) expansions. For the 
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udo 4 5 (Ol n 6и) 
5200) ч (8n чл) е0 4 {тп єл) 
яг 7 Я © яг Я 4 © 6 
‘AO (9n ‘Sn) Fao (en 1л) 
6 8 Я 4 © 6 Я Я 4 © б 6 
MES 6 6 6 6 6 6 NIMM 
oh s qo 181 по [Ol qo Ed по -EL 4 
Mio Я S (Оти *6n) 
£O С (8n чп) (o T (ensen) 
as ad Я © beue i 4 © 6 
IJO (9n п) lao (сп * 1n) 
б 77g 4 © 6 up E 4 © 6 6 
qo [©] 2 6 6 & о © Ө dol 
d 2 [©] [©] [©] [©] av 
din $n (0) ЦО ——— qo ПО —— ón ёп 


(TO) sutsn susoyed uorsuedxo o[qissod омї, T'E әде, 
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family of connectives they consider, there is no operation (i.e. function) to expand 
a given derivation, since in these cases the process of expansion would be highly 
non-deterministic. 

It is instructive to compare the collection of elimination rules TR(OD obtained by 
JR-inversion, with the collection PSH(OI) obtained by PSH-inversion and consisting 
of the following rule: 


[AILB] [C]LD] 
O(A, B, C, D) E 


PSH 
Е ОЕ 


To show that PSH(OD) is in harmony with CI one only need two reductions 
(instead of the eight reductions needed for JR(OL)), and the way in which a derivation 
should be expanded is unequivocally determined: in the expanded derivation each of 
the introduction rules and the elimination rule is applied exactly once, and each rule 
application discharges exactly one copy of each dischargeable assumption: 


uy из из u4 


2 A B Ol C D Ol 
[O] Ong" [O] [O] 

g' < Zp [74 

E (uy, U2, U3, U4) а 2 E 2 QEPSE 


Despite the more bureaucratic character of JR-inversion, one can nonetheless 
argue that, from the intensional standpoint we advocate, JR-elimination rules are as 
harmonious as PSH-elimination rules. 

The reason is that it is possible to recover permutative conversions for the JR- 
elimination rules using a combination of expansions and reductions in (almost) the 
same way as for disjunction (see above Sect. 3.5). 

Observe first that the strategy used to simulate the permutation for the disjunc- 
tion elimination rule generalizes straightforwardly to all PSH-elimination rules. For 


instance, the permutative conversion for AE?S#°: 
ui и2, uj иә 
[A] [B] [A] [B] 
2 gf g! 
(u1, U2) АЛВ__ С AEPSH permutes to [C] 
[C] 2 2" 
2" A^AB D 
р (u1, U2) a AE 


can be simulated using the reduction (A 8?°+') and the generalized expansion (^ tes 


since the derivation on the left-hand side of the permutation expands using (A "n 
to the following derivation: 
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uj u? 
: А [А18] 
1 2 " g! 
B 
(ит, u2) =“ ТС] C AEPSH 
2 д" 
(u1, u2) ANB D р AEPSH 


which in turn reduces using (л 82") to the derivation on the right-hand side of the 
permutation. 

In the case of JR-connectives, in order to simulate permutations one needs not 
only 6-reductions and (generalized) n-expansions but their inverse operations as well. 
Suppose one stipulates that the “official” way of performing generalized expansions 
involving the JR-elimination rules for ^ is the following: 


2 К [aag] ^ 
[A ^ B] Mig 2 g (А?) 
g 2 Ал В C JR i 
С (u1) ЛЕ 
AAB С JR 
(u2) C ЛЕ» 
The (general) permutative conversion for AE]*: 
и и 
[А] [А] 
2 9g 2 
(и) ANB C AEJR permutes to [C] 
[C] l 2 gl 
cg 
2 (и) AAB D АВ! 


D D 


can be simulated as depicted in Table 3.2.7! A permutation for the other elimination 
rule ЛЕУ" can be obtained in a similar manner. 

We observe that we could have simulated the permutations in a similar way also 
if we had stipulated the other possible expansion pattern to be the “official” one: 


n m 


G A B AI 
и lx " [A ^ B] 
A 1 
ansi ni oe аў 
2 2 Ал В C JR 
C AAB (n) С AE} 
(m) AES" 


C 


In fact, the left-hand sides of the expansions (^ ne) and (anz) differ only up to 
the order of application of the two elimination rules, and hence they would belong to 
the same equivalence class of derivations induced by the -reductions together with 
either of the two expansions. Thus the two equational theories induced by coupling 
the -reductions with either of the two generalized n-expansions induce the same 
equivalence classes of derivations.?? 
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c С 
а I wd -g im HY, m a SAV a 
(n) urdV (In) l a ЧУУ 
к,ан К lav d in TYE i шаа ачу ™ д 
„6 5 ч а Чуу б Ё у 2 
[2] Py & Ч ү Р " Я 
apl V ©п їп and V [2] udgv 
6 [2] A 
6 Е 
Ha | [V] 
[v] їп 
а 
С c 
lav wi’ aq an XY (n) a 
СИ avy 6 „б 
Ga А [21 
I 
а > Hv (n) 
шу Tay [21 (n) duy W 2 avy 
ED 2 avy @ @ 
a: ee Г] 
[V] 
n 


„LAV Joy uonejnuued әш Sunep[nurs T'E AQL 
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Summing up, it is true that there is no unique way of defining expansion patterns, 
and it is also true that one cannot simulate permutations for the JR-elimination 
rules using f-reduction and generalized n-expansions only (as one needs their 
inverses as well). Nonetheless, the different expansion patterns (coupled with the 
B7*-reductions) yield the same equivalence relation on derivations. Hence the choice 
among different expansions patterns is irrelevant for the resulting notion of identity 
of proofs. 

We conclude this section by observing that JR-inversion shows a true deficiency 
if one tries to apply it to first-order quantifiers. Apart from the case of collections 
of introduction rules with at most one premise (in which case JR-inversion yields 
the same elimination rule as PSH-inversion) JR-inversion delivers elimination rules 
which are not stable. Let's reconsider the quantifier expressing the 7 corner of the 
square of opposition. With the collection 7I consisting of the introduction rule ЛІ, 
JR-inversion may be expected to associate the collection of elimination rules TR(/1) 
consisting of the following two rules: 


[A(y/x)] [B(y/x)] 


L(A, B) C ТЕЗЕ L(A, B) C 
1 
C C 


iE 


with an eigenvariable condition on y in the two elimination rules. Contrary to the 
case of PSH(/D, when ZI 15 coupled with JR(ZD itis not even possible to formulate 
an expansion following the simpler pattern of Prawitz, since the application of the 
first elimination rule would violate the eigenvariable condition: 


2 AO») В(у/х) 


[^ 
1 Wu does not expand to 2 duy) L(A, B) L(A, B) IEIR 
x( > ) 1,(А, В) 1,(A, B) m 1 
(u2) ТАВ) ТЕ; 
x , 


Thus in general, it does not seem that JR-inversion can deliver stable rules for 
quantifiers apart from those instances in which it coincides with PSH-inversion. 
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Although implicitly acknowledged by most authors, it was only recently observed in 
an explicit manner [56, 93, 94] that the specification of an inversion principle cannot 
constitute an exhaustive characterization of harmony. 

To see why, it is sufficient to reconsider the rules for conjunction discussed so far. 
The collection of rules consisting of AE; and AE» is not the one that one would obtain 
from the Prawitz-Schroeder-Heister inversion principle, namely the one consisting 
of the unique elimination rule in general form: 
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[A][B] 
AAB С 


PSH 
С AE 


However, neither Prawitz nor Schroeder-Heister seem to be willing to deny that 
the elimination rules AE; and AE» are in harmony with AI as much as the rule AE??, 
Similarly, when Read [77] argues that the rules: 


[A] [8] 
Ал В С Ал В C 


BYR 
C 259 C 


AEF 
are in harmony with ^1 һе does not seem to be willing to deny that the other collections 
of elimination are in harmony with AI as well. 

Thus, the collection of elimination rules generated by some inversion principle 
from a given collection of introduction rules is not, in general, the only one which is 
in harmony with it.” 

But what do all these alternative—but, intuitively at least, equally 
harmonious—collections of elimination rules have in common? What all mentioned 
authors explicitly observe is that the alternative collections of elimination rules are 
interderivable with each other (we indicate interderivability between (collections of) 
rules using -Е).?* For instance, both AE; and AE» (resp. AEF and AE3®) are deriv- 
able from AE*??, and conversely the latter rule is derivable from the former ones. 
Similarly, both AE{® and AE5® are derivable from AE, and AE» and vice versa. 

Although not stated in an explicit manner, this seems to be the reason why the 
rules of A of NI are considered as much in harmony as those obtained by PSH- and 
JR-inversion. 

That is, it seems plausible to claim that Prawitz and Schroeder-Heister, and Jacinto 
and Read (at least implicitly) endorse the following notions of harmony: 


Definition 3.5 (PSH-harmony by interderivability) Given two collections TI and TE 
of introduction and elimination rules for a connective T, we say that TI and TE are 
in PSH-harmony via interderivability if and only if 


+E ЧЕ PSHCGD 


Definition 3.6 (JR-harmony by interderivability) Given two collections 1I and TE 
of introduction and elimination rules for a connective T, we say that TI and TE are 
in JR-harmony via interderivability if and only if 


ТЕ ЧЕ ORD 


In fact, for any collection of introduction rules 11, PSH(TI) ЧЕТ R(1D.? Thus 
the same collections of rules qualify as harmonious according to the two definitions. 
The invariance of harmony with respect to the choice of the inversion principle has 
been taken by Schroeder-Heister as a reason for defining harmony without making 
reference to any inversion principle at all. In fact Schroeder-Heister [93, 94] proposed 
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two different accounts of harmony, on the basis of which he then demonstrated that 
the rules obeying PSH-inversion satisfy the proposed condition for harmony. Both 
notions of harmony are equivalent with each other, and moreover they are equivalent 
to those resulting from Definitions 3.5 and 3.6. 

We will say that the rules satisfying these notions of harmony are in harmony by 
interderivability. 

We fully agree with Schroeder-Heister on the need for a notion of harmony going 
beyond the specification of an inversion principle. However, it is doubtful whether 
rules which are in harmony by interderivability can, in general, be equipped with plau- 
sible reductions and expansions. In other words, it is doubtful whether the account 
of harmony obtained by coupling inversion with interderivability can still qualify as 
intensional. 

After introducing in the next Section a further example of inversion principles, in 
Sect. 3.10 we will present an example justifying this claim. 


3.9 Yet Another Inversion Principle 


In this section we consider a further inversion principle. Its range of applicability is 
limited to the restricted case of a collection of introduction rules consisting of a single 
introduction rule, which is however allowed to discharge assumptions, in contrast 
to the inversion principles discussed in Sects. 3.4 and 3.7. Nonetheless, whereas the 
two inversion principles of the previous chapter can be generalized to cover also 
introduction rules that can discharge assumptions (as shown in the Appendix, see 
Sect. A.9), the inversion principle introduced in this section cannot be generalized to 
cover more than one introduction rule. For this reason, we will referred to it as ‘toy 
inversion’, henceforth T-inversion. In spite of its limited range of applicability, it will 
be useful to establish the negative result in the final part of the present chapter, namely 
that harmony by interderivability is not intensional. As in the case of PSH- and JR- 
inversion, the collection of rules obtained by T-inversion from a given collection of 
introduction rules is interderivable with those obtained by the other two inversion 
principles. 


Definition 3.7 (T-inversion) Let + be an n-ary connective and let 1I consist of a 
single introduction rules for Т of the following form: 


[B11]... [Bip] [Вт1]...[Втрь„1] 


С, Cm + 


T(A1, А) 


where either т = 0 or т > 1 and both of the following two conditions hold: (i) 
for all 1 < j < m and either p; = О or p; > 1 and for all 1 < k < р; there is an 
1 <i <n such that Bj, is syntactically identical to A;; (ii) for all 1 < j < m there 
isan 1 <i € n such that С, is syntactically identical to A;. 
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We indicate with T(1I) the collection of elimination rules consisting of m elim- 
ination rules, each of which has the following form (we take T(1I) to be empty if 
m = 0): 


T Bj see Bip, +E; 
J 
Cj 


We say that + is a T-connectives in a calculus К iff K includes 11 and T(1D, and 
+ does not occur in any other of the primitive rules of K.” 


Clearly, 5, ^ and T are T-connectives in NI. 

Connectives whose rules obey T-inversion satisfy the informal statement of har- 
mony, as itis shown by the possibility of formulating the following £- and n-equations 
for K-derivations in a calculus К in which f is a T-connective (in the schemata we 
abbreviate +(A,,..., An) with 7): 


и Ulp, ml Итрт 
[Bh]... [Bil Bm]. Bp, ] 2» — 2 
7 (2, $ 
2 Dn ; m +B; [Bj] ... UBjp;l 
C, ses Cm 2 Р] v & 
Qus Umpm) ки! Zi 
ї Ву Bip; 
ТЕ; С; 
Cj 
forl<j<m 
Н ui uipi E иті Итрт 
By ... Bip Bg ... В.р, її D 
——————À— TE; TE, < 
Ci en Cm t 
(Итана Ulp Um], mpm) { ТІ 


with и... Итр„ fresh for 2 


We conclude this section by presenting two collections of rules for two connectives 
Д and b such that in a calculus К consisting of both collections of rules as primitive 
both ġ and b аге T-connectives. Moreover for any pair of propositions A and B, the 
propositions АВ and AbB are interderivable but not 67-isomorphic in К. In the next 
section we will then consider the collection of rules for a third connective ӯ having the 
same collection of introduction of rules of # and the same collection of elimination 
rules of b. We will show that the rules of 5 are in harmony as interderivability. 
However, although it is possible to define reductions and expansions for 5, the most 
obvious candidates for these equations trivialize the notion of isomorphism. 
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Let's first consider the following collections of rules Я and ДЕ for Ё: 


И tE 
ALB A 
Б ДЕ! 
[А] [В] 
В А А АВ В 
А{В a n 2Р2 
ALB 
A HE3 


Clearly, ДЕ = T(#D, and the harmonious nature of the rules is displayed by the 
В- and n-equations of Table 3.3. 

Using these equations, it easy to show that АВ is By-isomorphic to ((A D B) A 
(В D A) ^A in NI^?5, the extension of NI^? with ДЇ and ДЕ. 

Consider now the collections of rules bI and bE for the connective b. These two 
collection of rules differ from those of # in having B instead of A as third premise 
of the only introduction rule, and, correspondingly, in having B instead of A as 
consequence of the third elimination rule: 


bI bE 
AbB A 

Б bE, 
[A] [B] 
B A B bl AbB B ЬЕ 

AbB A 2 
АРВ 
рЕз 
В 


These two collections of rules also obey T-inversion and thus £- апа n-equations 
that follow the same pattern of those of { are available. Using them, it easy to show 
that ALB is Bn-isomorphic to ((A D B) A (B D A)) ^ B in NI^^^, the extension 
of NI^” with bI, bE. 

It is moreover easy to see that in the calculus consisting of И, Е, bI, DE we 
have that АЙВ -Е AbB and АйВ # ADB. To establish the latter fact it suffices to 
adapt to this system the interpretation of NI^?” in the category of finite sets (see 
above Sect. 2.6), by interpreting АЙВ and АЬВ as the sets of triples whose first two 
members are functions from the set interpreting A to that interpreting B and vice 
versa, and whose third members are elements of the interpretation of A and of B 
respectively. Whenever А and B are interpreted on finite sets of different cardinalities 
so are АВ and АБВ. 
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(G 30] Qso1y а pue n pm) 


gty 4 
iy dE Y gam 
g > tgi [4: ji lag 
6 ый div 9 guüv ү guy 
6 6 6 
Egt У Vy T — — g === === 
i guv n р 9 on == NY = (a‘n) I Y ош oo _ (a‘n) 

к, а Y ү 4 6 4 б vV V g ба єє V V g 
t 191 £z Л ГА [g] 9 Gq Л Ig [v] 29 Gq G 15 
[g] vl "6 191 ГУ] "6 [g] ГУ] 
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3.10 Harmony by Interderivability is Not Intensional 


To show the limit of harmony by interderivability we now consider a collection of 
rules for a third connective, we call it 2, which is obtained by “crossing over" the 
collections of rules of ġ and b: The collection BI consists of the introduction rule 
obtained by replacing # with 5 in Й; and the collection ДЕ consists of the elimination 
rules obtained by replacing b with § in РЕ, PE? and bE3. 

Clearly, hI and ДЕ do not obey T-inversion, due to the mismatch between the third 
premise A of the introduction rule and the consequence B of the third elimination 
rule. We list all of I, ПЕ, and т): 


LI ДЕ TOD 

ALB A ALB A 

pn BE, 
[A] [B] B B 

B A A " ALB B ALB B 
AUB A ДЕ? А ДЕ? 

AUB АВ oy 

Б? a 5 


Although ДЕ 4 T(ġI), the two collections of rules are clearly interderivable. 
Hence, in spite of the fact that they do not obey T-inversion, the two collections 
of rules І and ДЕ do qualify as in harmony by interderivability. 

The question that we want to address now is the following: Can we define appro- 
priate B- and n-equations for the derivations of a calculus K in which the rules 
governing § are апа hE? 

Whereas the 6-reductions for local peaks generated by hI and дЕ; and [Е follow 
the pattern of those of t and b, one may doubt that a reduction for the peak generated 
by Шапа [Ез can be found. A moment of reflection however dispels this doubt, since 
one can come up with the following reduction: 


u v 
[A] [B] i 
Vis es m аз [А] 
(u,v) ВА ^y Ф 
АҢВ БЕ В 
В 3 


This reduction shows that, in spite of the mismatch between the third premise of hI 
and the consequence of Es, this elimination rule allows one to derive no more than 
what is needed in order to infer its premise by the introduction rule. 

Similarly, although the expansion pattern cannot simply be constituted by applica- 
tions of the three elimination rules followed by an application of the introduction rule, 
the following 7-expansion shows that what one gets from АВ using the elimination 
rules is no less than what is needed to reintroduce АДВ by means of its introduction 
rule: 


78 3 Towards an Intensional Notion of Harmony 


D 
ds А p B pa L з ш 2 
< 
DE; ДЕ? ДЕ? AGB 
(u, v) 8 A A y 
ALB 


In spite of the fact that these conversions show that the rules for 4 satisfy the 
informal statement of harmony, they are inadmissible from the viewpoint of the 
intensional approach to inferentialism that we advocated. 

To see why, consider the derivation obtained by expanding a given K-derivation 
2 of АДВ ending with an introduction rule. The form of 2 is the following: 


u? 


[А] [By 


Zi Ф D3 

A A 
, I 
(u1, u2) AB q 


and that of the derivation Z' obtained by tj-expanding 2 is depicted in Table 3.4. 
In such a derivation all occurrences of ALB (apart from the conclusion) constitute 
local peaks. By f-reducing them we do not obtain the derivation Z of which the 
derivation considered is an expansion, but instead the following: 


Ds 
[A] 
Ф 

у v? 
[A] [8] [8] 
2 D D 
A A 


(vi, v2) ALB 


By symmetry and transitivity of the equivalence relation induced by the 6- and 
n-conversions for 5 we thus have the following equivalence: 


23 
и и? [А] 
[A] [By | . | 2, 

7 7 7 2 
2i ij r = [A] [B] [в] 

B 

(ит, U2) am pi Zi Ф Ф 
4 A A 


(vi, v2) ALB 
This means that all instances of these two derivation schemata (obtained by replacing 
Zi, Ф and Z3 with actual derivations) pairwise belong to the same equivalence 
classes induced by £- and n-equations. This is problematic and the reason is that the 
derivations obtained by appending an application of [Ез to the conclusions of the 
previous ones will belong to the same equivalence classes as well: 
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Ф 
и uz [A] 
[А] 18] A 
v v2 
^ 2 9% f [A] [В] [B] 
(u1, U2) A B p Zi Ф Ф 
AIB E B A A 
p P (vi, v2) tl 
ABB e 
B 3 


E 
ES 
С 


and in the limit case in which Z, and 23 simply consist of the assumption of some 
formula (in which case, A — B — C for some C) these schemata boil down to the 
following: 


ШЕ 


C 


This means that in presence of the reductions and expansion for {, for any formula 
C, any derivation from C to C is equated with the derivation consisting only of the 
assumption of C (i.e. the identity function on the set of proofs of C). But this means 
that in presence of д any two interderivable formulas are also isomorphic, since the 
compositions of the proofs establishing that each is derivable from the other are 
equated to the identity functions (cf. Sect. 2.5 above). 

In other words, the addition of ӯ to any calculus К, even one containing interderiv- 
able but not isomorphic formulas, has the result of making formula isomorphism 
collapse onto interderivability. 

We take this fact to show that the rules for ġ equipped with the reductions and 
expansion discussed in this section should not qualify as harmonious, at least not on 
the intensional account of harmony we want to advocate. As we argued in Sect. 2.6, 
what is characteristic of this conception of harmony is that it is not formulated 
merely in terms of derivability conditions, but rather on the availability of certain 
proof-transformation that induce a notion of identity of proofs, which in turn makes 
room for the definition of the notion of isomorphism, that is of an equivalence relation 
on formulas which is finer grained than intederivability. Given the dramatic conse- 
quences for identity of proofs and isomorphism of the rules and equations associated 
with 8, it seems that a genuine intensional account of harmony should disqualify 
these rules as genuinely harmonious. 
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This shows that, on an intensional account of harmony, in order for a collection of 
elimination rules to qualify as in harmony with a certain collection of introduction 
rules, one should require more than just its interderivability with the collection of 
elimination rules generated by inversion from the given collection of introduction 
rules. The notion of harmony as intederivability cannot be taken as a satisfactory 
definition of an intensional account of harmony. 


Notes to This Chapter 


1. It is worth observing already now that we are not assuming that given a col- 
lection of introduction rules, at most one collection of elimination rules can be 
in perfect harmony with it. We only assume that if a collection of elimination 
rules is in harmony with a given collection of introduction rules, a necessary 
condition for another collection of elimination rules to be also in harmony with 
that collection of introduction rules is that the two collections of elimination 
rules are interderivable. (For an exact definition of the notion of derivability of 
rules, see Appendix A below.) That this condition is not sufficient is suggested 
by the operator governed by the following (doubtly harmonious) rules: 

A B AGB AGB A 


I E E 
AGB @ A GE, B GE» 


A thorough discussion of this point will be the content of Sect. 3.10. 

2. In Steinberger [102] terminology, the rules for quantum disjunction are a case 
of E-weak (or equivalently I-strong) disharmony. 

3. Another difficulty with quantum disjunction consists in the fact that in a calculus 
containing both standard disjunction and quantum disjunction the two connec- 
tives are interderivable, i.e. they "collapse" into one another. It is true that the 
collapse of quantum disjunction into standard disjunction is clearly related to 
the problem of stability. However, at least according to Dummett (see [12], 
p. 290), this is “another interesting phenomenon illustrated by the restricted 
*or' -elimination rule", rather than an illustration of the failure of stability itself. 
In fact, stability (in Dummett's sense at least) seems to be orthogonal to this 
kind of “collapses”: An analogous collapse takes place if one considers a natu- 
ral deduction calculus with both intuitionistic and classical negation, but this is 
usually (and certainly by Dummett) not taken as a reason for deeming intuition- 
istic negation as unstable. Conversely, as is shown by the example discussed in 
the next section, we may have instability (in Dummett's sense) without an anal- 
ogous collapse taking place (see below Note 5). Although the point is certainly 
debatable, the given reconstruction is, at least, sound to Dummett's intent. 

4. One of the referees objects that one might expect in the case of D that it is the 
no more aspect of harmony which is not met, since “DE permits to draw more 
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conclusions from A D B than we should be able to: applying DE immediately 
after DI results in a deduction of B from all kinds of assumptions, whereas 
DI requires a deduction from A alone." [emphasis added]. We agree with the 
referee in pointing out that using DE one can infer В from A only given further 
assumptions, namely A D В (or, possibly, the assumptions on which А 5 B 
depends). This is however “less” than what is needed to infer A D B using the 
introduction rule, which is why we claim that it is the no less aspect of harmony 
the one which is not met. For now, that C is “less” than D can be understood 
in terms of deductive strength, i.e. in the sense in which for instance, A D B 
is less than B, or Г, A => B is less than A — B: whenever B is derivable so 
is А D B but not necessarily the other way around, and similarly whenever 
A = В is derivable so is Г, A => B but not necessarily the other way around. 
The considerations to be developed in the final section of the chapter suggest 
however that in order to attain a genuinely intensional account of harmony a 
finer grained understanding of ‘more’ and ‘less’ might be required. 


. It is worth remarking that, contrary to what happens in the case of the two dis- 


junctions, *quantum like' implication does not collapse on standard implication 
in a calculus containing both connectives (although A D B is implied by A D B, 
the converse is not true). As for Dummett the rules of *quantum-like' implication 
give rise to a situation of instability analogous to the one of quantum disjunction, 
for him the collapse issue cannot be the heart of the problem (cf. Note 3 above). 


. Although Prawitz (see [65], Chap. 2) actually uses this term to refer to the "no 


more" aspect of the informal characterization of harmony given at the begin- 
ning of Sect. 1.3 above, our way of using the term is certainly in the spirit 
of Lorenzen [41], who coined it to refer to a particular principle of reasoning 
(whose role corresponds essentially to that of an elimination rule) which he 
obtained by “inverting” a certain collection of defining conditions for an expres- 
sion (whose role corresponds essentially to that of introduction rules). For more 
details, see Moriconi and Tesconi [50]. 


. The rules governing PSH-connectives are referred to by Kürbis (see [38], Sect. 


2.8) ‘rules of type 2’. 


. For a discussion on the origin of the terminology, see Schroeder-Heister [91]. 
. For a definition of how the schemata 


Ke кт, 
[Bii] e. [Вт] By o. Bkm, 
my and k1 Ктк н 
Dr П 
k 
C 


are to be understood in the context of the calculus of higher-level rules see the 
Appendix. 

Prawitz [65] restricts the rule LE to atomic conclusions and shows that in the vari- 
ant of NI with restricted LE, all instances of the unrestricted rule are derivable. 
Normalization is then established for the modified system. As in the modified 
system no maximal segments beginning with LE can arise, Prawitz drops the 
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12. 


13. 


14. 


15. 


16. 


17. 


18. 


19. 


wording ‘or of LE’ from his definition of maximal segment. Details of nor- 
malization for the calculus with the unrestricted rule can be found in Troelstra 
and Schwichtemberg [122]. Gentzen’s unpublished normalization result is also 
worked out using the unrestricted rule, see von Plato [64]. We stick to the unre- 
stricted rule to stress the fact that the rules for in NI follow the pattern of 
Definition 3.1, i.e. that L is a PSH-connective in NI. 


The notions of (/-step) Vy-conversion, to be indicated with Ed are to be 
understood in analogy with those of (one-step) 6-reduction as introduced in 
Sect. 1.4, and similarly for the other connectives. 

Due to the fact that LE has no minor premises, the permutative conversions in 
this case do not exchange the order of application of rules, but simply erase some 
rule applications. 

The notions of 8 y-reduction and fy-normal derivation are to be understood 
in analogy with those of 67-reduction and 67-normal derivation introduced in 
Sect. 1.5. 

The development of formalisms for the full language of NI in which it is possible 
to single out a unique representative for each equivalence class of derivations is 
an active field of research. These formalisms rely on advanced proof-theoretic 
techniques, such as (multi-)focusing [82] or normalization by evaluation [1]. 
The rule DE, and DEpsy are equivalent in the sense defined in Appendix A. 
In other contexts, notably in constructive type theory, the higher-level rule is 
however essentially stronger than both DE, and DE (see [19]). 

The natural deduction calculus for Tennant's [113] Core Logic is obtained from 
NI, by allowing only derivations in B y-normal form, and additionally, by drop- 
ping the rule of LE altogether and imposing on the other rules some restrictions 
which enforce the relevance of the assumptions for the conclusion of the deriva- 
tions. Observe that the two derivations of (A ^ C) ^ (B ^ D) from A ^ B and 
B ^ C discussed in the text are perfectly accetable core proofs for Tennant's 
standards. Thus the criticism raised against NI, applies to Tennant's system 
as well. We thereby do not call into question Tennant's claim that core proofs 
capture the core of derivability, in the sense that whenever A follows from Г in 
NI (or NI,) there is a subset of Г from which either A or L can be shown to 
follow by a derivation in Core Logic. What the remarks in this section however 
call in to question is whether the derivations in the natural deduction calculus 
for Core Logic are really capable of representing the proofs they denote in the 
most direct way possible. 

Non-standard elements are of course ruled out by the second-order definition 
(“The set of natural numbers is the smallest set X such that. ..") which is however 
strictly stronger than the first-order formulations given by clauses (i)-(iii) or 
encoded by the introduction and elimination rules. 

Clearly, the number of these functions is the product of the numbers m; (1 < 
k < r) of premises of each of the r introduction rules 

As in the case of PSH-inversion, also JR-inversion generalizes straightforwardly 
to collections of introduction rules of higher-level, by taking ће Bg; to be rules 


84 


20. 


21. 


22. 


23. 


24. 


25. 


26. 


3 Towards an Intensional Notion of Harmony 


rather than formulas (see Appendix A for details). Read [77] and Francez and 
Dyckhoff [18] initially suggested an inversion principle that they claimed could 
generate harmonious elimination rules of level < 2 (i.e. possibly discharging 
formulas but not rules) for collection of introduction of level < 2. As shown 
by Dyckhoff [13] and Schroeder-Heister [91], the need of elimination rules of 
higher-level is however unavoidable and Jacinto and Read [34] rectify these 
initial attempts by using higher-level rules unrestrictedly. 

Here and below we consider the more general form of permutations in which 
arbitrary chunks of derivations (and not just applications of elimination rules) 
are permuted upwards, corresponding to the more general form of permutations 
for disjunction discussed at the end of Sect. 3.5. 

I thank Paolo Pistone for his help in getting this right. 

The same is true in the case of more complex collection of rules as well, such 
as OI and R(OD, although showing that the alternative expansion patterns are 
equivalent is, in general, a lot more laborious. 

An exception is Kürbis, who defines the rules of a connective as harmonious 
if they follow either the pattern of PSH-inversion or that of T-inversion to be 
defined below in Sect. 3.9 (see [38], Sect. 2.8, and Notes 7 and 26 to the present 
chapter). Thus, on Kürbis definition, JR-connectives are not harmonious, unless 
one ascribes him the implicit adoption of a notion of harmony by interderivability 
along the lines introduced in the present section. 

For an exact definition of structural derivability and K-derivability of rules, and 
of collections of rules, see Appendix, in particular Sect. A.5. Whenever not 
otherwise stated, by (inter-)derivability of (collections of) rules we will always 
understand structural (inter-) derivability. 

Although a proof of this fact is still missing in the literature, its precise presen- 
tation would require the introduction of further notation (needed to keep track 
of the indexes occurring in the R-elimination rules) and for this reason will be 
omitted. 

The rules governing T-connectives are referred to by Kürbis (see [38], Sect. 2.8) 
as ‘rules of type 1’. 


Notes to This Chapter 85 


Open Access This chapter is licensed under the terms of the Creative Commons Attribution 4.0 
International License (http://creativecommons.org/licenses/by/4.0/), which permits use, sharing, 
adaptation, distribution and reproduction in any medium or format, as long as you give appropriate 
credit to the original author(s) and the source, provide a link to the Creative Commons license and 
indicate if changes were made. 

The images or other third party material in this chapter are included in the chapter's Creative 
Commons license, unless indicated otherwise in a credit line to the material. If material is not 
included in the chapter's Creative Commons license and your intended use is not permitted by 
statutory regulation or exceeds the permitted use, you will need to obtain permission directly from 
the copyright holder. 


Part II 
Paradox 


Chapter 4 (R) 
Paradoxes: A Natural Deduction ENTE 
Approach 


Abstract Thechapterintroduces the Prawitz- Tennant analysis of paradoxes, accord- 
ing to which paradoxes are derivations of a contradiction which cannot be brought 
into normal form, due to “loops” arising in the process of reduction. After presenting 
Prawitz's original formulation of Russell's paradox, we introduce a simplified pre- 
sentation of it, and then discuss the relevance of the difference between intuitionistic 
and classical logic and of structural properties of derivability for the Prawitz-Tennant 
analysis. 


4.1 The Prawitz-Tennant Analysis of Paradoxes 


In Appendix A to his monograph on natural deduction, Prawitz [65] considered a 
calculus for naive set theory, we will refer to it as NI?-*, obtained by extending 


NI-- (the (5, .L]-fragment of NI) with an introduction and an elimination rule for 
formulas of the form t € {x : A} to express set-theoretical comprehension: 


A(t/x) t€(x:A] 
te{x:Ay & A(t/x) 


where A(t/x) is the result of substituting t for x in A. 

The rules certainly satisfy the informal statements of harmony (given on Sects. 1.2, 
1.3 and 3.4) and thus it seems quite uncontroversial to regard these as being in 
harmony! : a reduction and an expansion can straightforwardly be defined as follows: 


2 2 
A(t/x) I cp 2 2 en t€lx:A] E 
тє{х:А} С° А(ух) te{x:A4} | АХ) €^ 
AG) © "тє{х:А} © 


Using —А to abbreviate A D L, choosing —(х € x) for A and {x : ^(x € x)} for 
t we have that 


A(t/x) = (х: =x € x)} € {x : =x exp =ағ ^p 
te{x:A}= {х:-(хєхл)}є{х:—(хєл)} =ағ р 
© The Author(s) 2024 89 
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and hence we obtain the following instances of €I, €E and €f (we indicate these 
instances as pI, pE and pof respectively): 


2 
DP, pl Ux pE = pl > Е 
p p pE p 
cp 


Using them it is very easy to construct a closed derivation, we call it ^, of ^p: 


— — pE 1 
== 3E (4) 
(1) —— 21 
^p 


By a further application of the instance pI of €I, one obtains a closed derivation 
& of p as well: 


ous. ld 
E (2) 
(1) — 01 

ЕА 

0 p 


and combining these two derivations with an application of 5E yields Russell's 
paradox in the form of the following derivation: 


p IP BO 3 
ap pt e 3E 
a NT I 
L (1) —— DI (R) 

1 1 = 

(1) 2 p pl 
0 

n ЭЕ 


This situation confirms the paradoxical nature of о: We can produce two closed 
derivations of о and its negation respectively. This obviously leads to contradiction, 
i.e. to a closed derivation of 1.2 

Observe however that, since the encircled occurrence of — is a maximal formula 
occurrence, this derivation is not -normal. By applying the implication reduction 
D£ we obtain the following derivation: 


E B 1 

quer p SE op 
JE — — pE 1 
t pi —— Ium e DE 
(2) М! 
——— рЕ — — pl 
=p p P 
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Here the encircled occurrence of p is a maximal formula occurrence. By an 
application of pf we obtain the derivation К we started with. 

Ateach ofthe two steps there was only a single possibility to reduce the derivation, 
hence no -reduction sequence starting from К ends with a 8-normal derivation. That 
is, weak normalization does not hold for 8-reduction іп NI>+*, since the process of 
reduction of R gets stuck in what Tennant [109] called an “oscillating loop". Prawitz 
proposed this to be the distinctive feature of Russell’s paradox.? 

Tennant [109] considers a rather rich variety of both semantic and set-theoretic 
paradoxes besides Russell's—the Liar and some of its relatives, Grelling's, and 
Tarski's quotational paradox—and shows that once the assumptions required for 
their formulation are spelled out in terms of natural deduction rules, they all gen- 
erate derivations of L (or, as in the case of Curry's paradox, of an arbitrary atomic 
proposition) which do not normalize.^ 

The steps playing the role of €I and €E are called id est inferences, as they result 
from extra-logical principles: In the case of Russell's paradox, from set-theoretic 
comprehension. In the case of the liar paradox, to take another example, analogous 
id est inferences would be based on the observation that a certain sentence says of 
itself that it is not true. Here, “observation” is not necessarily empirical inspection, 
but may result from some arithmetical referencing mechanism. 

Schroeder-Heister and Tranchini [95] dubbed the *Prawitz-Tennant analysis of 
paradox' the thesis that a paradoxical derivation is a derivation of an "unwanted" 
sentence (such as ‘Santa Claus exists’ in the case of Curry's paradox, or L) that fails 
to normalize." 


4.2 A Simplified Presentation 


In the sequel we will mainly focus on a simplified formulation of the paradoxes 
obtained by assuming p to be a nullary connective governed by the rules pI and oE. 
We refer to the extension of NI>+ with the rules for p as NI>+”. The derivations of 
the previous section will therefore be viewed both as derivations of NI>+* and as 
derivation of NI>+?, the context always making clear what is meant. 

When p is treated as primitive, the labels introduction and elimination in the case 
of pI and pE may appear odd at first, since о figures both in the premise and in the 
conclusion of the rule. The labels are however justified, as p is the main operator of 
the conclusion of the introduction rule and the main operator of the premise of the 
elimination rule. (In particular they are instances of the general form of introduction 
and elimination rules given in the Appendix). 

Being a nullary connective, o behaves like a proposition which is interderivable 
with its own negation. As is well known, a proposition like р is definable not only in 
the language of naive set theory but in other settings as well. Examples are languages 
which allow to refer to their own expressions—as arithmetic does by means of 
Gódel numbering, or natural language does by means of quotes—and that contain a 
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transparent truth predicate—that is a predicate T governed by the following inference 
rules: 
A ТГАТ 


s Ti 3 IB 


where ГА is a name of the sentence A. 

The brute stipulation that р is governed by the two rules and by the reduction 
above permits one to disregard the exact conditions under which a sentence like it 
can be defined, and to focus on what is essential for the analysis of paradoxes to be 
developed in this part of the present work. 

Different simplified versions of paradoxes such as the one we will consider have 
been discussed against the background of certain extensions of both natural deduction 
and sequent calculus. Schroeder-Heister [89] considers extensions of both sequent 
calculi and natural deduction by means of clausal definitions. In this context, para- 
doxes are typical examples of partial inductive definitions [29] such as the following 
one, in which an atom R (only a notational variant of o) is defined through its own 
negation: 


р= {К <= -К 


Definitions are “put into action” by inference rules, which are justified by а principle 
of definitional closure (yielding introduction rules in natural deduction and right rules 
in sequent calculus) and a principle of definitional reflection (yielding elimination 
rules and left rules respectively). The natural deduction rules putting definition D 
into action are just the rules for p. 

A different but related approach is deduction modulo [9], where a given set of 
rewriting rules (essentially corresponding to a definition in the sense of Schroeder- 
Heister) is viewed as inducing a congruence relations on propositions, modulo which 
deductive reasoning takes place.’ 

The analysis of paradoxes to be developed here is by no means in contrast to 
the one arising from these settings and it is meant as being, at least in principle, 
applicable to them as well, as well as to those in which paradoxes are defined by the 
usual subtler means. This is, however, a task which will be left for further work. 


4.3 Which Background Logic? 


All paradoxes investigated by Tennant yield a non-normalizing derivation of L using 
only intuitionistically acceptable inference rules (beyond those specific for the para- 
dox). Therefore he concludes his analysis stressing that 


it appears to me an open question whether every paradoxical set of sentences [...] can 
be shown to be paradoxical by means of an intuitionistic proof with a looping reduction 
sequence. (Tennant [109], p. 285) 
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The focus on intuitionistic logic of the Prawitz-Tennant analysis of paradoxes has 
been criticized by Rogerson [80], who considers a formulation of Curry’s paradox in 
classical logic and observes that the derivation fails to display the loopy feature called 
for by the Prawitz-Tennant analysis. We consider a slight variation of Rogerson’s 
proof based on Russell’s rather than Curry’s paradox. 

In the presence of the classical rule of reductio ad absurdum 

[7A] 
A 


"3 RAA 


the derivation of Russell's paradox R can be recast in a more symmetric fashion?: 


p 1 


— — pE 1 Е 
a Рв dj a 
0) —— a UEM (Ra) 
(1) =- ВАА 
+ DE 


—— pl 1 
Cp p = 

Т. >E o y” 
(1) — RAA SE 

p n 

pE (1) = RAA 
=p pu 
I 


According to Rogerson, this derivation cannot be further reduced’: 


No standard reduction steps given by Prawitz [65] straightforwardly apply in this case as the 
use of the [set-forming] operator insulates the formulas from the normalization process. It 
seems plausible to conclude that this proof does not reduce to a normal form and does not 
generate a non-terminating reduction sequence in the sense of Tennant [109, 111]. Thus, 
Tennant’s criterion for paradoxicality does not apply here. (This is not to say that it is 
inconceivable that someone might be able to define a reduction step applicable in this case 
that would induce a non-terminating reduction sequence.) (Rogerson [80], p. 174) 


Although it is true that no standard reduction step given by Prawitz [65] applies to 
this derivation, it is also well known that the normalization strategy for classical logic 
devised there applies only to language fragments for which the application of RAA 
can be restricted to atomic conclusions. In richer languages, for example in languages 
containing disjunction and existential quantification, the conclusion of RAA cannot 
be restricted without loss of generality to atomic formulas, and in order for normal 
derivations to enjoy the subformula property a further (family of) reduction(s) has 
to be considered. This new reduction is based on the idea that the conclusion of an 
application of RAA which is also the major premise of an elimination rule counts as 
a redundancy to be eliminated. The reduction, proposed by Stalmark [100], can be 
depicted schematically as follows: 
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m 


n : A 2, 
[7A] AB B В 
2 RAA l I 
RN ` (m) [^4] 2 
A (2) E 2 
В (n) =- КАА 


where ТЕ stands for an application of an elimination rule for some connective + 
belonging to the language fragment under consideration and (2) stands for the 
(possibly empty) list of derivations of the minor premises of the application of ТЕ. 

In the language of naive set theory, the presence of the operators for the formation 
of set terms jeopardizes the notion of atomic sentence. Thus, a redundant conclusion 
of RAA is not always a non-atomic formula, but more generally any formula which 
can act as the major premise of an elimination rule. This makes it plausible to let, 
in the scheme for reduction proposed by Stalmarck, +E range over pE as well. Once 
this is done, Rogerson’s derivation can be further reduced, and the derivation after 
some steps reduces back to itself.!° 

Tennant formulated his criterion for paradoxicality with an emphasis on intu- 
itionistic logic, by claiming that a paradoxical sentence is one governed by id est 
inferences such that, in the extension of intuitionistic logic obtained by this addi- 
tion, there are derivations of 1 that fail to normalize. As observed by Rogerson, 
the choice of intuitionistic logic is certainly motivated by the will of showing that 
non-constructive principles of reasoning do not play any significant role in the phe- 
nomenon of paradoxes. However, part of the reason for this choice is also the fact 
that the criterion for paradoxicality is formulated in terms of normalization, and 
intuitionistic logic (in its usual formulation at least) is well-behaved with respect to 
normalization. Given the crucial role played by normalization (not only from the 
formal, but also from the conceptual point of view), the *base' calculus relative to 
which the non-normalizability effects of id est inference is to be tested must enjoy 
normalization. 

Tennant may be wrong in restricting one's attention to intuitionistic logic, but 
we do not believe that extending the criterion beyond this logic is as problematic as 
Rogerson claims. For the case of classical logic, the above observations are sufficient 
to show that on a proper account of normalization for classical logic, Russell's (and 
Curry's paradox as well) display the looping effect called for by the Prawitz-Tennant 
analysis. Rogerson hints at other possible counterexamples, but, provided the logical 
frameworks in the background can be given a proper proof-theoretic presentation, 
Tennant's criterion should always be applicable. 

In fact, the notion of harmonious calculus used to establish Fact 3 (see Sect. 1.6 
above) provides some sufficient conditions for what should be meant by “а proper 
proof-theoretic presentation". Whenever the id est inferences display the kind of 
harmony needed in order for the resulting calculus to qualify as harmonious, Fact 3 
warrants that every closed 6-normal derivation ends with an introduction rule. Hence, 
if in a certain calculus a proposition has no introduction rules (as it is the case for L in 
NI2-^), there cannot be closed B-normal derivations of it. Hence, by contraposition, 
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if the calculus allows one to construct a closed derivation of a proposition without 
introduction rules, this derivation cannot be brought into 6-normal form. 


4.4 A Substructural Analysis 


Current philosophical discussions on paradoxes have highlighted the key role played 
by "structural" properties of logical consequence, such a reflexivity, transitivity, 
monotonocity and contraction! ! in the derivations of contradictions within paradox- 
ical languages, and proposed solutions of the paradoxes consisting in the rejection 
or restriction of one of these properties (see e.g. Zardini [126] for an overview of the 
different directions of investigations on the topic). The term ‘structural’ is used for 
these properties since the rules expressing them in sequent calculus (the identity ini- 
tial sequents for reflexivity, the cut rule for transitivity, weakening for monotonicity) 
are commonly referred to as ‘structural rules’.!* Structural rules (like the properties 
they express) do not make reference to any particular piece of logical vocabulary, in 
contrast to the "operational" rules each of which governs a particular logical con- 
nective. 

Given the correspondence between normalizability in natural deduction and the 
admissibility of the cut rule in sequent calculus, the Prawitz-Tennant analysis of 
paradoxes is closely connected to the analysis that focuses on the role played by the 
cut rule in sequent calculus. This has been advanced in the last decade by several 
authors (notably by Ripley [79], who adapted ideas going back to Girard [23, 24] to 
a language equipped with a transparent truth predicate). 

Whereas the connection between cut and transitivity of logical consequence is 
obvious, the one between transitivity and normalization might require a short expla- 
nation. The transitivity of derivability is hard-wired in the natural deduction setting: 
In (almost)? any calculus of natural deduction, given a derivation Z of B from A 
and another one Z' of C from B, there is obviously one of C from A, namely the one 
resulting by plugging Z in place of the open assumptions of Z'. However, it is the 
normalization theorem which warrants transitivity at the level of normal derivability 
in a given calculus: Given a B-normal derivation J of B from A and another one J’ 
of C from B, the derivation resulting by plugging Z in place of the open assumptions 
of Z' is not necessarily normal (in the resulting derivation one or more occurrences 
of B could be maximal). It is only if normalization holds that we have the warrant that 
there is also a -normal derivation of C from A. When normalization fails, as in the 
calculus NI>+? there is no such warrant. In fact, a counterexample to the transitivity 
of 8-normal derivability is easily obtained by considering the derivation = and the 
one that resulting by "removing" from R the two occurrences of the subderivation 


AR: 


SHE. 
^p p 
"PE Nin" E 
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This derivation of L from —p is f-normal, and so is the derivation ~%. However, 
by combining together the two derivations one obtains a derivation of from no 
undischarged assumption (viz. R) which is not 6-normal and that does not reduce 
to a B-normal derivation. In fact, as observed above, in NI>+? there cannot be any 
closed 8-normal derivation of 1 as a consequence of Fact 3. 

Another structural rule of sequent calculus which plays an essential role in con- 
nection to paradoxes is contraction.'^ In the natural deduction setting, contraction 
corresponds to the possibility of discharging more than one copy of an assumption 
at once. Dropping contraction in sequent calculus corresponds to restricting DI by 
allowing at most one copy of an assumption to be discharged at a time in natural 
deduction. In the modified calculus, the non-normalizing derivation R is blocked, 
since it is impossible to derive L using the rules of p and the ‘restricted’ implication 
rules. Actually it would not even be possible to derive either of o or ^p. Moreover, 
all derivations would normalize (without contraction, both f and pf make the size 
of the derivations (i.e. the number of applications of inference rules in a derivation) 
decrease, therefore one can show normalization to terminate by induction on the size 
rather than on the number of maximal formulas of maximal degree), i.e. transitivity 
would be fully restored. 

That contraction is an essential ingredient for triggering Russell's paradox has 
already been observed by Fitch [16] who initiated the investigations of contraction- 
free logical settings. Formal attempts at developing naive set theory on a contraction- 
free base are due to Grišin [27], Girard [25] and Petersen [57]. More recently Zardini 
[125] investigated the possibility of developing a theory of truth in a contraction-free 
setting (therefore addressing also semantic paradoxes). 

Contraction-free approaches to paradoxes are of great interest, but they will not 
be pursued in the present work. Given the semantic role of reduction in PTS, it 
seems that approaches to paradoxes focusing on normalization failure have the best 
prospects of being integrated into the PTS picture developed in Chap. 2. 


Notes to This Chapter 


1. For some authors, in order for a collection of rules to qualify as harmonious, it 
is essential that the introduction rules satisfy Dummett's complexity condition 
(see the remarks following Definition 2.2 in Sect. 2.9). Hence they would deny 
the harmony of these rules on these grounds. Note however that not only “prob- 
lematic" rules such as €E and єЕ, but also the rules for e.g. the second-order 
existential quantifier (see Troelstra and Schwichtemberg [122], Chap. 11) would 
fail to qualify as harmonious on these grounds. 

2. Itis worth stressing that the nullary connective counts as a contradiction only 
if some sort of explosion principle is associated with it. This is the case in 12, 
where LE ensures that L is indeed something “bad”. 

3. Observe that the above analysis as well as the considerations to be developed 
below apply if we replace the notions of 8-reduction and f-normal derivation 
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with the notions of weak f-reduction and 8,,-normal derivation (discussed in 
Sect. 2.7). 

4. Instead of looping reduction sequences one can, more generally, consider non- 
terminating reduction sequences, which covers paradoxes such as Yablo's (see 
Tennant, [111]). In the following, we will throughout speak of the looping feature 
of paradoxical derivations, keeping in mind that “non-termination” of reduction 
sequences is the appropriate more general term. 

5. In more recent work Tennant (see [112, 113, 115]) has proposed a different 
proof-theoretic analysis of Russell’s paradox. On the revised analysis (which 
will be presented in some detail in Sect. 6.5 of Chap. 6), instead of a non- 
normalising derivation of L from no assumption, one obtains a normal derivation 
of 1 from the assumption that Russell’s term {x : ^x € x} possesses a denota- 
tion, i.e. a disproof of the existence of the set of all sets that do not belong to 
themselves. On these grounds, Tennant argues that the proof-theoretic anaysis 
of paradoxes aligns with Ramsey famous distinction between semantic and set- 
theoretic paradoxes. On Tennant revised view only semantic paradoxes give rise 
to non-normalizing derivations of L, whereas set-theoretic “paradoxes” merely 
yield disproofs of inconsistent assumptions, and hence do not qualify as para- 
doxes at all. 

6. In the context of constructive type theory, we may introduce p directly by stip- 
ulating the following formation, introduction, elimination and equality rules 
(where ! stands for the operation associated with the introduction rule, апа į for 
the inverse operation to be associated with the elimination rule, whose meaning 
will be informally explained in Sect. 5.8): 


Formation rule: 


p set 
Introduction rule: Elimination rule: 
t: 79 t: 
It: po jt: 
Equality rule: 
t: 79 
if5t:p 


The derivations —4 and 2 of ~p and of р are decorated (respectively) as 


follows: 
1 
1 х: 
Xi c cE 1 
——— — EE 1 jx: 70 x:p 
jx: =p Xx:p DE 
DE арр(іх, х): L 
app(ix, x) : -L (1) DI 
DI Ax.app(ix, x) : ^p 
Ах.арр(х, x) : =p el 


lÀx.app(ix, х): p 
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That is, the two derivations ~# and @ correspond to the two closed 6-normal 
terms decorating their respective conclusions: 


Ах.арр(х,х): ро L lAx.app(ix, x): p 
and the derivation R corresponds to the following term: 
app(Ax.app(jx,x), !'Ax.app(ix, x)) : L 
whose loopy reduction can be written as: 
app( Ax.app(x,x), l'Ax.app(jix, x)) <> app(j!Ax.app(jx, х), !Ax.app(jx, x) ) 


The reader familiar with untyped A-calculus will easily recognize that R is just 
a typed version of the well-known loopy combinator (Ax.xx)(Ax.xx) (cf. also 
Schroeder-Heister [89, Sect. 4]) and Note 7 below. 


. The two approaches are closely related, and their main difference is manifested 


when one considers the type theories that can be associated with them: In defini- 
tional reflection a type-constructor—yielding a term typed by the definiens (the 
head of the clause) when applied to terms typed by the definiendum (the body 
of the clause)—is associated with each clause of the definition together with an 
inverse operation of type annihilation for the given defined atom. On the other 
hand, in deduction modulo the types of the definiens and of the definiendum are 
just identified modulo the congruence induced by the set of rewriting rules. In 
this case there is thus no explicit operation on terms corresponding to the defini- 
tional steps. In both settings the proof-terms which are associated with the above 
derivation К of 1 do not normalize. In deduction modulo, this term is just the 
same as the non-normalizing term (Ax.xx)(Ax.xx) well-known from untyped 
A-calculus. In the definitional setting the term has the somewhat more richer 
structure described in Note 6, due to the extra term-constructors associated with 
the definitional steps. 


. By ‘symmetric’ we mean that the two immediate subderivations of Ra; can be 


obtained from each other by replacing occurrences of о with occurrences of =p 
(and vice versa) and by switching the order of the premises of (DE). 


. Although Rogerson speaks of a derivation based on Curry's paradox, the deriva- 


tion we discuss can be viewed as obtained from the last derivation on p. 174 of 
[80] by replacing a € a with o and p with L, and moreover by (i) removing 
in both main subderivations redundant applications of RAA, i.e. applications 


allowing one to pass from L to L with no discharge; (ii) 7-reducing in both sub- 
1 
Mu NEN 
eb 
derivations ^p to ^p. The considerations in this section apply exactly 


to Rogerson's original derivation as well. 
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10. Provided that, as usual, one also reduces redundant applications of RAA (see 
Note 9 above). Otherwise, one ends up with the more general kind of non- 
termination mentioned in Note 4. 

11. When logical consequence is assumed (as it is usually done) to hold between 
sets the rule of contraction does not correspond to any distinguished property 
of logical consequence. Not so when consequence is understood as holding 
between multi-sets of formulas, in which case (if desired) it has to be explicitly 
formulated. 

12. The term ‘structural’ is sometimes used only for the rules of contraction and 
weakening but we will follow here the nowadays more common usage (in the 
philosophical community) of referring also to cut and identity initial sequents 
as structural rules. 

13. A notable exception is Tennant’s calculus for Core Logic, in which only deriva- 
tions in normal form are admitted (see Note 16 to Chap. 3). As a result of this 
restriction (and of other peculiarities of Core Logic), transitivity does not hold 
in general: given a derivation of B from Г and one of C from B, A there might 
not be a derivation of C from Г, A (although there is one of either C or 1 from 
a subset of Г, A. 

14. This is true when sequents are defined as pairs of multi-sets or of sequences of 
formulas (whereby, in a single-conclusion setting, the second element of sequents 
is just a single formula). When sequents are taken to be pairs of sets of formulas, 
contraction becomes an implicit feature of sequent calculus, and thus it plays no 
explicit role in paradoxical derivations. 
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Сһар{ег 5 R) 
Validity, Sense and Denotation ENS 
in the Face of Paradoxes 


Abstract Which modifications does the account of PTS developed in the second 
chapter need to undergo for it to be applicable to languages containing paradoxi- 
cal expressions? We argue that one of the basic tenets of Prawitz-Dummett PTS— 
namely, the definition of the correctness of an inference as validity preservation— 
must be given up. As a result, the proposed account of PTS is enriched by introducing 
a notion of sense alongside the one of denotation. Paradoxical derivations are shown 
to act as the proof-theoretic analog of singular terms endowed with sense but lacking 
a denotation. The question of which class of derivations should be regarded as having 
a denotation is reconsidered, and we show the consequences of the choice of differ- 
ent criteria of identity of proofs for the analysis of languages containing paradoxical 
expressions. 


5.1 Paradoxes as Non-denoting Derivations 


The Prawitz-Tennant analysis of paradoxes is a way to characterize paradoxes by their 
proof-theoretic behavior, looking at the derivation of absurdity generated. Although 
this is not per se a solution to the paradoxes and Tennant stresses is should not be 
meant as such (see e.g. [109], p. 268) it can be naturally turned into a solution. This 
is implicitly suggested by both Prawitz and Tennant who write: 


In other words, the set-theoretical paradoxes are ruled out by the requirement that derivations 
shall be normal. (Prawitz [65], p. 95) 


and 


The general loss of normalisability, confined as it is according to our conjecture above to 
just the paradoxical part of the semantically closed language, is a small price to pay for the 
protection it gives against paradox itself. Logic plays its role as an instrument of knowledge 
only insofar as it keeps proofs in sharp focus, through the lens of normality. Normalisability, 
in the context of semantically closed languages, is not to be pressed as a general pre-condition 
for the very possibility of talking sense; rather, normality of proof is to be pressed as a general 
pre-condition for the very possibility of telling the truth. (Tennant [109], p. 284) 
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Neither Prawitz nor Tennant did develop these remarks any further.! However, the 
idea that requiring derivations to be normalisable can rule out paradoxes seems to fit, 
and induce a refinement of, the conception of derivations as linguistic representations 
of proofs that we developed in Chap. 2. 

The relationship of derivations to proofs has been there developed by closely fol- 
lowing an analogy with the relationship between numerical terms and numbers. The 
analogy can be further extended by taking into account an additional element. In 
the case of numerical expressions, nothing prohibits the possibility of considering 
languages which allow the formation of non-denoting expressions, such as ‘5 : 0’, 
or expressions obtained using a definite description operator, such as “Ше greatest 
even number'. Clearly, there is no way of rewriting expressions such as these onto 
a numeral. Given that numerals represent numbers in the most direct way, in a lan- 
guage for arithmetic allowing for the formation of non-denoting expressions, that a 
numerical expression denotes a number means that it can be rewritten into a numeral. 

As numeral are the most direct expressions denoting numbers, in Sect. 2.8 we 
argued that in harmonious calculi closed normal derivations can be regarded as the 
most direct way of denoting proofs (although we stressed that there are different 
options as to what exactly ‘normal’ should be taken to mean). By analogy with the 
arithmetical case, that a derivation denotes a proof can be taken to mean that it can 
be rewritten into a normal derivation. 

As we stressed in Sect. 2.8, the claim that normal derivations in harmonious calculi 
can be regarded as the most direct way of denoting proofs is backed by Fact 3 (see 
Sect. 1.7), i.e. by the fact that in harmonious calculi every closed normal derivation 
ends with an introduction rule. (As we stressed in Sect. 2.7, Fact 3 holds not only for 
B-normal—and hence also for 87-normal—derivations, but for В,„-погта] deriva- 
tions as well). 

This suggests to take as a necessary (though not necessarily sufficient) condition 
for a closed derivation 9 of an arbitrary calculus (i.e. one that need not be harmo- 
nious) to "really" denote a proof, to be that Z reduces to a canonical derivation. 

Paradoxical derivations fail to normalize, thus they act as the proof-theoretic ana- 
logue of non-denoting singular terms: a paradoxical derivation such as the derivation 
R of Russell’s paradox (see Sect. 4.1 above) fails to denote a proof, that is it lacks a 
denotation. This squares very well with the above remarks by Prawitz and Tennant. 
In Prawitz's calculus for naive set theory NI>*, or in its simplified relative NI>+?, 
although there are derivations of L, there is no closed canonical derivation of it. The 
reason is simply that there are no introduction rules for -L and thus all derivations of 
L in Prawitz's calculus for naive set theory cannot be canonical nor reducible to а 
canonical derivation. 

Hence, any such derivation will fail to denote a proof. This squares with the BHK 
interpretation as well, which tells us that -L is the proposition of which there is no 
proof! 
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5.2 Non-denoting Derivations and (In)validity 


In Chap. 2, we presented PTS in a two-fold manner, either as being based on the idea 
that derivations denote proofs, or as based on the specification of a validity predicate. 
The intuitive connection between the two ways of presenting PTS is that a derivation 
is called ‘valid’ iff it denotes a proof. 

In truth-conditional semantics, truth has to be a distinguishing feature of some 
but not all propositions if the semantics is to be of any interest at all. Analogously, 
validity-based presentations of PTS stress that validity should be a distinguishing 
feature of some but not all derivations, if PTS is to be of any interest at all. 

To show that validity applies only to some, but not all derivations, Prawitz and 
Dummett consider derivations built up not just from the inference rules of a specific 
calculus, but rather from “arbitrary” inference rules (see Sect. 2.9 for details). Among 
these rules, one also finds rules which are intuitively not correct, such as the following: 


ADB 
—— 

By admitting non-correct inference rules, they can then distinguish between valid 
and invalid derivations, the latter being those in which non-correct inference rules 
have been applied. Note however, that Prawitz and Dummett do not define the validity 
of a derivation as its being constituted by applications of correct inference rules. 
Rather, it is the correctness of an inference that is defined in terms of the validity of 
the derivations in which it is applied (see Sects. 2.10 and 2.11). 

In the present chapter we will argue that paradoxical languages offer another 
setting in which validity can be shown to apply only to some, but not all derivations 
available. In the previous section, building on remarks by Prawitz and Tennant we 
argued that paradoxical derivations do not denote proofs. As the validity predicate 
is meant to apply to a derivation iff this denotes a proof, paradoxical derivations 
in systems such as those discussed in the previous chapter are therefore the natural 
candidate for non-valid derivations. 

As we will show in the next section, the notion of validity as defined by Prawitz 
cannot however be meaningfully applied to derivations of a calculus such as NI>+?. 
The main task of the present chapter will be that of proposing an alternative definition 
of validity suitable to be applied to the derivations of such a calculus. Rather than 
using validity of derivations to define correcntess of rules (as done by Dummett and 
Prawitz), the notion of validity to be proposed will rely on the notion of correctness 
of rules, which will therefore need to be defined first. 

Since the analysis of paradoxes presented in the previous chapter goes back to 
Prawitz [65] himself, it might be somewhat surprising that his definition of validity 
cannot be applied to derivations in NI>+?. It should however be remarked that Prawitz 
never came back to discuss his treatment of paradoxes in any of his later writings. 
Similarly, considerations on the set-theoretic and semantic paradoxes play only a 
marginal role in Dummett's writings. Thus, when framing the notion of validity, 
they were not in the least interested in having a notion that could be applied to 
paradoxical derivations. 
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5.3 The Need of Revising Prawitz's Validity 


In this section, as well as later on in the chapter, we will repeatedly refer to the 
derivations —.@ and 2 of ~p and p as well as to the two derivations R and R’ of L 
from the previous chapter (the reader can find them in Sect. 4.1). 

On Prawitz's definition of validity (see Definition 2.2 in Sect. 2.9), we immediately 
see that the closed derivation R of 1 in NI>+* or NI?+ fails to qualify as valid, 
since it cannot be reduced to a canonical derivation, not just relative to the set of 
reduction procedures 7 consisting of D£ and €f, or of, but on any extension of J, 
as there is no canonical derivation of at all. 

Troubles with Prawtiz's definition arise however when we consider the derivations 
=Z and Z of ^o and p. Although ^4? and 2 are both closed and canonical (and 
actually 6-normal as well) if we try to evaluate their validity using the clauses of 
Prawitz's definition, we obtain contradictory results. 

Consider the immediate subderivation of ^4: 


=p p (*) 


Using Prawitz’s definition, we can easily show that the derivation (*) is valid relative 
to J and any arbitrary atomic system S. Being an open derivation, it is valid relative 
to J апа S iff for every closed derivation Z of p that is valid relative to 7’ 5,7 
and $, the corresponding closed instance of (ж): 


E 2 (жж) 


is valid relative to 7’ and S as well. The validity of 2 relative to J’ and S means 
that 2 7’-reduces to a valid canonical derivation, and hence that (жж) 7’-reduces to 
a derivation of the following form: 


[0] 


2' 
AL 
(n) P (ж ж ж) 
p pE 2 
=p p 
E 
T 2 


(where Z/ is valid relative to J’ and S). Now observe that (ж ж ж) B-reduces to: 
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which is warranted to be valid by the validity of Z'. 

We have therefore shown that (*)—i.e. the immediate subderivation of ^22—is 
valid relative to J and S. Hence so are — and, in turn, Z as well (since these are 
closed canonical derivations with valid immediate subderivations). 

Unfortunately, we can at this point easily establish the contradictory of these 
claims, namely that these derivations are also not valid. Consider again (жж) and 
look at what happens when we take the derivation Z to be 2. We thereby obtain 
a particular closed instance of (ж), namely the derivation R' (see Sect. 4.2). As we 
know, R’ does not reduce to canonical form, thus (ж) (and hence —.@ and & as well) 
are not valid. 

The contradiction we arrived at has a clearly identifiable cause, namely the applica- 
tion of Prawitz’s definition of validity to derivations of NI?+ and NI>+?. Prawitz’s 
definition is by induction on the joint complexity of the conclusion and the undis- 
charged assumptions of derivations. Thus, the induction underlying the definition 
is well-founded only when the introduction rules satisfy the following complexity 
condition: the consequence of any application of an introduction rule must be of 
higher logical complexity than its immediate premises and assumptions discharged 
by the rule application. This condition is not satisfied by either €I or pI. Hence, when 
applied to derivations of NI?+ or NI>+? the definition has to be understood as а 
partial inductive definition in the sense of НаПпаӣѕ [29]. 

This situation prompts to revise the definition of validity of Prawitz in order to be 
able to consistently apply it to the derivations of calculi such as №127 and NI>+?. 
We will in particular explore the prospects of defining a notion of validity on which 


e as in Prawitz’s definition, a necessary condition for a closed derivation to be valid 
is its reducing to a canonical derivation (and this is enough to rule out R as invalid); 
e both —@ and 2 qualify as valid. 


This is not the only possible choice. One could for instance try to figure out a notion 
of validity on which not only R, but also both —4 and & qualify as invalid. Such 
a notion of validity may be more congenial to the advocates of solutions to the 
problem of paradoxes based on the rejection of the structural rule of contraction (see 
Sect. 4.4). Yet a further option would be of course that of denying the acceptability of 
the introduction rule for p due to its violating the complexity condition, and thereby 
rejecting the idea of revising Prawitz's definition altogether. We take our choice to 
be the closest in spirit to the remarks of Tennant and Prawitz quoted at the beginning 
of this chapter. The derivations ^ and & are normal and the remarks of Tennant 
and Prawitz seem to suggest that this is a sufficient condition to qualify as valid in a 
calculus like NI°+?. 

The goal of this investigation is not that of arguing in favor of a formal system, 
such as that of naive set theory, in which normalization fails, but rather of bringing 
to light the assumptions that are needed to make sense of the core idea of proof- 
theoretic semantics (i.e. that a derivation is valid iff it denotes a proof) in the context 
of paradoxical languages. Whether such assumptions should be accepted or rejected, 
will be mainly left to the reader, but we will try to make clear what does the acceptance 
or rejection of these assumptions commit one to. 
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To regard both ^4 and & as valid is tantamount to commit oneself to accepting 
that both —р and p have a proof, and thus to endorse a form of paraconsistency. As 
we will show, this gives rise to two distinct issues: the first concerns the way in which 
the BHK explanation should be extended, so as to provide an explanation of what a 
proof of p is; the second concerns the way in which the BHK clause for implication 
has to be understood in a paradoxical language. 

Before giving an exact formulation of the alternative definition of validity and 
coping with these two issues, we will discuss a further problem arising by the adoption 
of a notion of validity on which both ^4 and # but not К qualify as valid: namely, 
that of a proper understanding of the correctness of rules. 


5.4 The Local Correctness of an Inference 


If we intend to revise the notion of validity along the lines envisaged, we immediately 
realize that we also need to revise the notion of correctness of an inference rule. Given 
the prospected revision of the notion of validity, the correctness of an inference rule 
cannot be any more defined as the fact that, given proofs of its premises, the rule 
yields a proof of its consequence: that would be too strong a requirement in the 
presence of paradoxes. 

If we look again at R, we can observe that it is obtained by applying DE to two 
closed derivations that we want to regard as valid. As we want to deny the validity 
of R, we have that, on the revised notion of validity, by applying DE to two valid 
derivations one would obtain an invalid one. Thus this would be a case in which DE 
would not preserve validity.? 

Hence, would we keep Prawitz’s definition of correctness (see Definition 2.3 in 
Sect. 2.10)—according to which an inference is correct iff it yields closed valid 
derivations when applied to closed valid derivations—we would be forced to say 
that DE is not correct. 

This we take as a reason to revise the notion of correctness as well. We do not 
want the adoption of the (currently only envisaged) notion of validity to force us to 
deny the correctness of DE: the proper diagnose for the fact that DE fails to preserve 
(the revised notion of) validity is not that DE is not correct but rather the presence 
of о. How can this intuition be spelled out? 

As observed in Sect. 2.11, the availability of reduction procedures usually suffices 
to warrant the correctness of the elimination rules with which they are associated. 
It should now be clear that, when the language contains paradoxical expressions 
such as p, this is no more the case. To repeat, while in standard cases the existence 
of reduction procedures associated with the rule is enough to show that the rule 
preserves validity, this not so in general. 

The problem with Prawitz and Dummett’s definitions of validity and correctness 
is that they are too much tied to the standard cases. A way out of the problem is just 
to deny that preservation of validity is the right way of characterizing the correctness 
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of rules. Although in standard cases correct rules do transmit validity, it is way too 
demanding to expect a correct rule to preserve validity in all cases. 

The fact that the availability of reduction procedures for an inference rule suffices 
to warrant validity preservation tells us something important about the standard cases. 
However, from the fact that in general this does not happen, it should not follow that 
the availability of reduction procedures for an inference is not sufficient for the rule 
to be correct. Rather, it should only signal that we are not in a standard case. 

The application of areduction procedure “cuts away" two consecutive applications 
of an introduction rule and of an elimination rule. Plausibly, a necessary condition 
for "standardness" (i.e. for the availability of reduction procedures to be sufficient for 
the correctness of the rule in Prawitz's sense) is that all reduction procedures under 
consideration have the following property: The formulas which are conclusion of 
the application of the introduction and the major premise of the application of the 
elimination rule cut away by the application of the reduction procedures must be of 
a higher logical complexity than the formulas surrounding it. Clearly, of violates 
such a condition." 

As detailed in Sect. 2.10, given Prawitz and Dummett's definitions of validity 
and correctness, the correctness of different kinds of rules is shown in substantially 
different ways. The correctness of introduction rules is almost “automatic”, and this 
reflects their "self-justifying" nature, i.e. the fact that they "define" the meaning of the 
logical constant involved (see in particular Note 22 to Chap. 2). Elimination rules, as 
well as other non-introductory inference rules, are shown to be correct by appealing 
to reduction procedures. There we stressed however that in the case of rules which 
are neither introduction nor elimination rules, reduction procedures boil down to 
derivations of the rules from the introduction and elimination rules. It is therefore 
natural to distinguish between the correctness of introduction rules (by definition), 
of elimination rules (which means that they are in harmony with the introduction 
rules) and of other rules (which means that they are derivable from introduction and 
elimination rules. 

Rather than obtaining this articulation of correctness as a byproduct of the defini- 
tion of correctness in terms of validity (as in Prawitz-Dummett PTS), we propose to 
use it as a direct definition of a notion of correctness (to distinguish it from Prawitz's 
definition, we refer to this notion as ‘correctness*’): 


Definition 5.1 (Correctness* of an inference rule) An inference rule schema is cor- 
rect* iff 


e Itis an introduction rule; 

e it is an elimination rule for + that belongs to the collection of elimination rules 
obtained by inversion from the collection of introduction rules for 7. 

e itis derivable from the introduction and elimination rules governing the expressions 
that occur in the rule? 


The adoption of Definition 5.1 instead of Prawitz's Definition 2.3 results in a 
better analysis of the situation. Even adopting a notion of validity on which both 
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=Z апа Z count as valid and R as invalid, DE still qualifies as correct* since it is 
in harmony with DI. 

It is true that DE does not preserve validity in all cases. But this is due to the 
presence of the paradoxical о (indeed, in standard cases DE does preserve validity). 


5.5 Local Correctness Versus Global Validity 


It may be retorted that the revision the definition of correctness according to 
Definition 5.1 has the drawback of forcing the rejection of the principle (V), accord- 
ing to which an argument is valid if it is constituted by correct rules (see Sect. 2.11). 
АП rules in R are correct* but we want to deny that the argument as a whole is valid. 

As we saw, although Prawitz rejected (V) as a definition of validity, he stressed 
that the principle still holds under his definitions of validity and correctness. On the 
contrary, by replacing Prawitz's Definition 2.3 with Definition 5.1 we are forced to 
give up principle (V). 

Is this really an unwanted consequence? I do not think so. 

The revised definition of the correctness of an inference makes the two notions 
of ‘being valid’ and ‘being constituted by applications of correct" inference rules’ 
diverge. As we saw, the semantic content of an argument being valid is its having 
a denotation. In the following, I will argue that, the notion of ‘being constituted by 
applications of correct* inference rules’ has also a genuine semantic content which, 
furthermore, should be kept distinct from that of having a denotation: Namely, having 
sense. 

According to Dummett [11], what Frege called the sense of an expression is best 
understood as a procedure, i.e. a set of instructions, to determine its denotation. 
Without entering the details of the idea, it should be clear enough that in general, it 
may be the case that although one is in possession of a set of instructions to identify 
something, any attempt to carry out the instructions fails. We may refer to such a 
situation as one in which the set of instructions is inapplicable. The inapplicability 
may depend on there not being a something satisfying the conditions codified in the 
set of instructions. Or on factual contingencies (such as time and space limitations). 
But one may also conceive cases of, say, structural inapplicability of the instructions. 
That is, cases in which the instructions are shaped in such a way that one cannot 
successfully bring to the end the procedure they codify. 

The core intuition underlying the notion of validity is that proofs are denoted by 
valid arguments. As we argued in Sect. 2.8, in harmonious calculi normal derivation 
can be seen as the most direct way of representing proofs. Although it is an abuse of 
language (since derivations and proofs belong to two distinct realms) it is tempting 
to “identify” proofs with normal derivations and thus, to view reduction to normal 
form as the process of interpreting derivations, i.e. as the process of ascribing them 
their denotation. 

Dummett’s model of sense perfectly applies to this picture: the set of instructions 
telling how a derivation is to be reduced to normal form is the set of instructions 
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telling how to identify the denotation of the derivation, i.e. it is the sense of the 
derivation. In the case of R, we have a derivation that does not reduce to canonical 
form, it does not denote a proof, i.e. it lacks a denotation. However, as there is a 
reduction procedure associated with each of its elimination rules, we can say that 
also in this case there is a procedure to determine its denotation. Thus, there is a 
sense associated with the derivation. However, although each step of the procedure 
in which the sense of R consists can be carried out, it is not possible to bring the 
procedure to the end, due to its entering the oscillating loop. 

The result of replacing Definition 2.3 with Definition 5.1 is thus that of making 
room, alongside the idea that derivations have a denotation, for the idea that they also 
have a sense, where having sense means that they are constituted by applications of 
inference rules which are correct". 

Taking ‘having sense’ as the semantic content of “being constituted by applica- 
tions of correct* inferences rules’ and ‘having a denotation’ as the semantic content 
of “being valid’, we can express the failure of principle (V) as a feature of PTS: 
Namely that of allowing the existence of derivations endowed with sense which lack 
a denotation. 

The alternative picture resulting from the adoption of Definition 5.1 returns an 
enlightening picture of paradoxes. Paradoxical derivations are not nonsense. On the 
contrary, what is paradoxical in them is exactly that they make perfectly sense. But 
putting this sense in action reveals their awkward features. For a derivation to be 
paradoxical, it must have sense. Its being paradoxical means that it does not denote 
a proof of its conclusion. 


5.6 р Versus tonk 


To really appreciate that the proposed distinction between sense and denotation is not 
an ad hoc solution to the problem of paradoxes, I believe itis worth comparing R with 
another kind of arguments for |, namely those that can be constructed іп NI>+*°™*, 
the extension of NI>+ with tonk’s rules. The following closed derivation of is 
obtained by replacing the atomic proposition p with L in the derivation T discussed 
in Sect. 1.7: 


и 


(u) ol ‚ 
———À — ^ — — tonkl (Т) 
(AD А) ёопк 1 


The common features of R and T’ are the following: 


e they have as conclusion; 
e they are both non-canonical, since they end with an elimination rule; 
e they are both irreducible to canonical form. 
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Being both not reducible to canonical form, they both qualify as invalid, that is, 
they both fail to denote a proof. 

Nonetheless, there is a crucial difference between R and T'. On the one hand, 
R cannot be reduced to canonical form because it is not normal and if one tries to 
apply the reduction procedures associated with its elimination rules one enters an 
oscillating loop. On the other hand, Т” does not reduce to canonical form because no 
reduction is (nor can be) associated with tonk’s rules, that is, because it is already 
a normal argument. 

As the derivation T discussed in Sect. 1.7, T' is normal, since there is no reduc- 
tion procedure that can be applied to it. This of course does not depend on the set 
of reduction procedures one is considering because, under any plausible notion of 
reduction procedures, there cannot be a reduction procedure associated with patterns 
constituted by an application of tonk I followed immediately by an application of 
tonkE. 

As observed, two are the features of NI which suggested the development of a 
semantics on proof-theoretic basis. The first one is that every derivation 6-normalizes; 
the second is the canonicity of closed 6-normal derivations. The additions of р 
and tonk to a well-behaving calculus (such as NI?) pose two different kinds of 
problems. On the one hand, the addition of o blocks normalization, but does not 
threat the canonicity of closed -normal derivations: Although not every argument 
normalizes (as exemplified by R), closed normal derivations always end with an 
introduction rule. On the other hand, in spite of the addition of tonk normalization 
still holds (T' is normal since there is no reduction which can be applied to it); but 
the normality of T’ ruins the semantic significance of closed normal derivation, since 
itis no more the case that every closed normal derivation ends with an introduction. 

Observe that although R is invalid, it is composed of applications of correct" infer- 
ence rules. This is not the case for T": as there is no reduction procedure associated 
with tonk's elimination rule, the rule is neither correct nor correct". In semantic 
terms, not only T' (like R) lacks a denotation, but also a procedure to determine it, 
since we do not have any reduction procedure telling us how to transform it into 
canonical form. In other words, T" not only lacks a denotation but also sense. An 
argument such as T’ thus fails to count as paradoxical. It is just nonsensical. 


5.7 Paradox and Partial Functions 


Considerations that are fully analogous to those that prompted the revision of the 
definition of correctness apply to the validity of open derivations. 

On the revised (but so far only envisaged) notion of validity, on which both ~% 
апа & are to count as valid, we have that there are at least one proof of ^o and one 
of p. According to BHK a proof of A D B is a function from proofs of A to proofs 
of B. As ^p is shorthand for o D L, a proof of ^p is a function from proofs of p to 
proofs of L. 
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The provability of both ^o and р together with the unprovability of L forces the 
view that, in presence of paradoxical phenomena, the functions proving an implica- 
tion must be understood as being sometimes partial. In particular, the proof of =p 
denoted by — is a function from proofs of р to proofs of L, but when we apply 
this function to the proof of p denoted by Z, we do not obtain a proof of 1. 

The derivation ^4 denotes a proof of —p that is a function as course-of-value 
obtained by abstraction from the function as unsaturated entity denoted by the deriva- 
tion (ж). Both the function as course-of-value and the function as unsaturated entity 
are however partial, in that they should yield proofs of L when applied to proofs 
of р. 

This situation brings to the fore the fact that, in the context of a paradoxical 
language, we cannot expect the validity of an open derivation to consist in the validity 
of its closed instances (i.e. that when its undischarged assumptions are replaced by 
closed valid derivations one obtains a closed valid derivation for the conclusion). In 
particular, the result of replacing the derivation # for the undischarged assumptions 
of (ж) yields the invalid derivation R’. In these contexts, a weaker notion of validity 
for open arguments should be adopted, a notion of validity which is not based on the 
idea of validity-transmission. 

A radical way of weakening the notion of validity for open derivations consists 
in simply requiring for an open derivation to qualify as valid that it is constituted by 
inference rules that are correct*. We therefore obtain the following (to distinguish it 
from Prawitz’s definition, we refer to this notion as ‘validity*’). 


Definition 5.2 (Validity*) A derivation 9 is valid* with respect to a set of reduction 
procedures 7 iff: 


e Itisclosed and it J -reduces to a canonical derivation whose immediate subderiva- 
tions are valid* with respect to ‚7; 
e or it is open and it is constituted by correct* inference rules. 


The revised definition achieves its goals, in that К qualifies as non-valid* (since 
it is closed but is not reducible to canonical form) whereas both ^4 and & qualify 
as valid* (they are closed canonical derivations, and their immediate subderivation 
are valid, being constituted by correct* inference rules. The derivation Т” fails to be 
valid (since, like R it is closed but not reducible to canonical form), and so is the 


following derivation: А 
аа tonkl 
ae tonkE 
Spar cor aaa 


This derivation is normal (i.e. cannot be reduced any further) and canonical, but its 
immediate subderivation is not valid, as it is constituted by an application of tonk E, 
an inference rule which is not correct". 

Itis easy to check that, in calculi whose rules are in harmony, for a closed deriva- 
tion to be valid* means to be reducible to a 8, -normal derivation, and conversely, 
derivations that are reducible to £,,-normal form qualify as valid*. This is the aspect 
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in which the definition of validity* remains faithful to Prawitz’s original definition 
(see Sect. 2.9). 

The differences are however substantial. As detailed in Sect. 2.10, in the case of 
the Prawitz-Dummett approach it is the notion of correctness of an inference that 
depends on that of validity. On the contrary, it is our notion of validity* to depend 
on that of correctness". 

As we observed, Prawitz’s definition of validity proceeds by induction on the 
joint complexity of the conclusion and the undischarged assumptions. Thus, for 
the induction to be well-founded, introduction rules should satisfy the complexity 
condition: in the introduction rules the consequence of the rule must be of higher 
logical complexity than all immediate premises and all dischargeable assumptions. 
The different clause for open derivations makes the definition of validity* well- 
founded even in cases in which Prawitz’s definition is not. The reason is that in order 
to check whether a closed canonical derivation is valid* one has to check the validity* 
of its immediate subderivations (like in the case of Prawitz's validity). The difference 
is however that the validity* of open subderivation consists in their being constituted 
by correct* inference rules (and not, as in Prawitz's definition in transmitting closed 
validity from the assumptions to the conclusion). Hence, in order for the definition to 
be well-founded, it is enough that the introduction rules satisfy a weaker complexity 
condition: the consequence of any application of an introduction rule must be of 
higher logical complexity of those immediate premises which are the conclusion of 
closed subderivations. 

The introduction rule for o does not satisfy even this weaker condition, in that 
it does not discharge any assumption and the complexity of the premise is higher 
than that of the consequence, thus inducing the need of checking the validity* of a 
closed derivation of —p in evaluating the validity* of a closed canonical derivation 
of p, hence giving no warrant that the process of checking the validity of a given 
derivation in NI>+? terminates. However, the well-foundedness of validity* can be 
warranted by considering the following revised version of the paradoxical p, which 
we call ро“ (cf. also [77]): 


[o*] * 
^ p p* +в 
— oI 1 и 
р? 
The reduction for p* is the following: 
n 
[o*] Ф 
a К eB io] 
me 2 Ф 
р B" gs 
E zl. 
n p 


Using o* we can construct a valid closed normal derivation of р“ as follows: 
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ВЕ (2°) 


and by combining two copies of it using the elimination rule for o* one obtains the 
following closed non-normalizing derivation of 1: 


üt 0) — >I (R*) 


As desirable, this derivation is not valid* because it is closed and it does not reduce 
to canonical form (as the reduction of its only maximal formula occurrence using 
p* В gives back the derivation itself). 

As it will be shown in the final sections of the chapter, the proposed modification of 
Prawitz's definition may still be found demanding in some respects. Before discussing 
these issues, however, we wish to address a further issue, namely the sense in which 
the rules for p can be said to endow it with meaning. 


5.8 Meaning Explanations for Paradoxes 


How can one state the proof-conditions for р or o*? Following the pattern of expla- 
nation common to the standard logical constants, to answer this question we stipulate 
an operation on proofs such that the result of applying it to a proof of — is a proof of 
p, this operation reflecting the kind of negative self-reference encoded in the instance 
of €I which entitles one to pass over from — to p. The introduction rule for p stip- 
ulates that a proof of р is what one obtains by applying this operation to a proof of 
—p. The elimination rule for o does no more than stating that this is the only means 
of constructing proofs of p (cf. Sect. 3.6). 

Though weak, these principles are strong enough to establish interesting facts, 
such as for instance the existence of both a proof of o and of its negation. At the 
same time, these principles are not arbitrary, as shown by the fact that they do not 
allow to establish the existence of proofs of 1. 

Similarly, a BHK-clause-like explanation of the proof-conditions of p* would be 
the following: a proof of о“ is the result of applying а self-referential abstraction-like 
operation to a function (as unsaturated entity) from proofs of о“ to proofs of L. The 
result of this operation are objects whose nature is similar to that of the functions as 
courses-of-value that constitute proofs of propositions of the form A D B, with the 
crucial difference that proofs of o* take proofs of o* as arguments and yields proofs 
of 1 as values. 

As in the case of the proof of ^o denoted by ^4, these functions must be some- 
times be understood as partial. Moreover, it is easy to see that, in a calculus equipped 
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with the rules for o*, the proofs of implications must be understood as functions (as 
course-of-value) which sometimes fail to be total as well. For example, this is the 
case for the proof denoted by the following valid* derivation: 


1 1 
p*E —@* 
() — 01 ne 
prot 
which does not yield a proof of L when applied to the proof of o* denoted by 
&* above, but only a derivation which fails to denote (being closed and not being 
reducible to canonical form). 

In both cases, however, it is clear that compositionality is violated, since their 
introduction rules fail to explain the meaning of o and р“ in terms of that of propo- 
sitions of lower complexity. This could be taken as constituting too big a departure 
from standard meaning explanation to qualify as acceptable. 

It is however worth stressing, that Dummett himself conceives the composition- 
ality of meaning as compatible with local forms of circular meaning-dependencies, 
presenting the names of colors as a typical example of words whose meaning is 
interdependent and cannot but be learned together. The case of an expression such 
as p* is the limit case of a circular meaning-dependency in which to understand an 
expression one needs a previous understanding of that very expression. If the idea of 
self-dependence is too disturbing, it is easy to see that the formulation of paradoxes 
does not rely on it in an essential way. If one considers instead of p* the pair of 
expressions o and т governed by the following rules: 


one can easily reconstruct Jourdain's paradox and the considerations developed in 
the present chapter equally apply to a calculus equipped with both o and r (see [109], 
p. 281). 

It is true that there is a fundamental difference between colors and paradoxes, 
namely that in the case of paradoxes we have chains of dependencies which make 
an expression depend "negatively" on itself. It is however far from obvious why 
compositionality should be compatible with positive but not with negative forms of 
dependency. It therefore seems that the burden of proof lays on the side of who wants 
to deny the viability of a PTS account of paradoxical expressions, rather than on the 
side of who wants to defend it. 
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5.9 Conservativity 


As a matter of fact, the adoption of validity* for derivations in NI?+? implies the 
existence of at least one proof of A D B for any A and В, denoted by a derivation of 
the following form: 


R 
L 

——— IE 1 

ADB A 3E (5.1) 
(SB 21 


Being closed and canonical, any derivation of this form is valid* iff its immediate 
subderivation is valid*, which in fact is the case since we defined an open derivation 
to be valid" iff itis constituted by correct rules, and DE, -LE as well as all rules applied 
in R are correct since they are either introduction rules or harmonious elimination 
rules. 

It is true that one may argue that this is unproblematic, by claiming that all such 
function are undefined for every argument . However, the need of introducing partial 
function in the explanation of the meaning of implication seems to be essentially tied 
to paradoxical expressions. Thus if A and B do not contain o as a subformula, one 
may expect that if there is a proof of A D B, the proof should be a function defined 
for all its arguments. 

Inother words, one may wish to adopt a notion of validity such that if there is a valid 
derivation of a p-free proposition A in NI>+?, there must be a valid derivation of A 
already in NI>+. This requirement is strongly reminiscent of Belnap's conservativity 
with a crucial different. While Belnap's requirement of conservativity is formulated 
using derivability (i.e. existence of derivations), we formulated the requirement for 
“valid derivability” (i.e. existence of valid derivations). 

As we have seen in the previous chapter, although the rules for p are in harmony, 
they extend in a non-conservative way derivability in NI?+. In the extension NI?+? 
of NI>+, the proposition | (which belongs to the language of the restricted calculus) 
is derivable, although it is not derivable in the original calculus. 

A conservativity result of the kind envisaged can however be established for By- 
normal derivations of NI>+: as we will now show, if neither A nor Г contain p as 
subformula, then there is a By-normal derivation of A from Г in NI>+? if and only 
if there опе іп NI>+. This will be taken as a reason to consider a further notion of 
validity by strengthening the notion of valid* derivation to the effect that a derivation 
is valid iff it By-reduces to a By-normal derivation. 

As we have seen, 8-reduction—Aand a fortiori В y -reduction—is not normalizing in 
NI--? with the derivation R providing a typical counterexample. In spite of this, By - 
normal derivations in NI?” also have the peculiar structure of By-normal deriva- 
tions inNI>+ (see Sect. 3.5). Prawitz [65] already observed that in NI>®, the tracks in 
P-normal derivations аге still divided into an introduction and elimination part. This 
holds for B y -normal derivation in NI>+ as well. The reason is essentially the same 
as іп NI>+: In order for the consequence of an application of an introduction (or of 
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LE) to act as the major premise of an application of an elimination, the derivation 
must be non-normal. 
However, given the standard definition of subformula. 


Definition 5.3 (subformula) 


e Forall A, A is a subformula of A; 
e all subformulas of A and В are subformulas of A D B, 


the neat subformula relationships between the formula occurrences constituting a 
track of a B y -normal derivation are lost in NI2-^, To wit, both in 24 and 2 we 
need to pass through —p in order to establish L from p. Thus, 8 y -normal derivations 
in NI>+? do not enjoy the subformula property. 

The reason for this is that the premise of pI is the formula ~p which is more 
complex than its consequence p. If we take the rules of a connective to codify 
semantic information, this situation is unsurprising. The rule DI gives the meaning 
of an implication in terms of its subformulas, and thus the semantic complexity 
of an implicational formula corresponds to its syntactic complexity. In the case of 
p, the rule pI gives the meaning of р in terms of the more complex formula ^p. 
Whereas the syntactic complexity of formulas in the (5, L, o}-language fragment 
is well-founded, one could say that their semantic complexity is not. 

This informal remark can be spelled out by defining the following notion, which 
in lack of a better name we call ‘pre-formula’. Intuitively, it reflects the semantic 
complexity of a formula, in the sense that the pre-formulas of a formula A are those 
formula one has to understand in order to understand A. 


Definition 5.4 (Pre-formula) 


e For all A, A is a pre-formula of A; 
e all pre-formulas of A and В are pre-formulas of A D B; 
e all pre-formulas of — are pre-formulas of p. 


The seemingly inductive process by which pre-formulas are defined is clearly 
non-well-founded. However, this is not a reason to reject it as a definition." Indeed, 
the notion of pre-formula turns out to be very useful in describing the structure of 
tracks in By-normal derivations іп 122: The neat subformula relationship holding 
between the members of a track in By-normal derivations in МІ? are replaced by 
pre-formula relationships between members of a track in P y-normal derivations in 
NI. 

By replacing 'subformula' with *pre-formula', one can establish a fact analogous 
to to Fact 4 (see Sect. 3.5) for МІ, from which one obtains the following: 


Fact 5 (Pre-formula property) All formulas in a By-normal derivation in NI2-^ 
are either pre-formulas of the conclusion or of some undischarged assumption. 


Proof By induction on the order of tracks (see proof of Fact 2 in Sect. 1.5). п 


We thus have that. 
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Fact 6 If Г and A are p-free, then there is a By-normal derivation of A from Г in 
NI--^ iff there is one in NI>+. 


Proof 'This follows immediately from Fact 5 together with the fact that if o does 
not occur in a formula than it is not a pre-formula of it (which can be established by 
induction on the degree of formulas). п 


That is, By-normal derivability in NI>1? is a conservative extension of By- 
normal derivability іп NI>+. More briefly, we will refer to this fact by saying that 
the rules for р are conservative over By-normal derivability in NI?+.8 

Fact 6 suggests to strengthen the condition for the validity of open derivations by 
requiring not only that they are constituted by correct* inference rules, but also that 
they reduce to By-normal form. Accordingly, for closed derivations in a calculus 
consisting of correct* inference rules, in order to qualify as valid it would not be 
enough for them to reduce to £,,-normal derivations (which is what being valid* 
boils down to) but to reduce to a By-normal derivation. This would yield a further 
alternative to Prawitz's validity, which we may call validity": 


Definition 5.5 (Validity**) A derivation is valid** iff it is constituted by correct 
inference rules and it reduces to a y -normal derivation. 


Though valid*, the derivations of the form (5.1) are not valid** (as they fail to 
reduce to @ y -normal derivations). The adoption of validity** as the notion to charac- 
terize the closed derivations having a denotation would allow one to avoid to accept 
that any proposition of the form A D B has a proof. 

A general concern undermines however the notion of validity**, namely it requires 
to apply reductions not only to closed, but also to open derivations. 

The validity* of open derivations is not defined in term of the validity* of its 
closed instances, and in this sense it represents a major deviation from the traditional 
notion of Prawitz. However, validity* remains faithful to the idea that reduction is of 
semantic significance only for closed derivations, and not for open derivations. This 
very fact, on the other hand, would be denied by the adoption of validity**, since 
validity** is defined in terms of reduction for open derivations as well. 

Compared to validity*, the advantage of adopting validity"* is the fact that the 
addition of the rules for a paradoxical expression like р does not enrich the set of 
proofs in the p-free language. On the other hand the addition of the rules for a para- 
doxical expression result in novel valid* closed derivations of propositions belonging 
to the p-free language. Whether this is a drawback for validity* is debatable, since in 
general it is not the case that the addition of a new expression (governed by harmo- 
nious rules) yields a conservative extension of the language to which it is added (a 
counterexample, mentioned by Prawitz [72], is provided by the rules for second-order 
quantifiers, which extend in a non-conservative way first-order arithmetic). 

To conclude, we ended up with two possible accounts of validity which can 
be applied to a paradoxical language. One is validity*, that is more faithful to the 
basic philosophical tenet that reduction is of semantic significance only for closed 
derivations, but has the drawback of making room for unwanted proofs of large 
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classes of propositions (in particular for each pair of propositions A and B there is 
at least one function from proofs of A to proofs of B). 

The other is validity** which is more restrictive in that, although its adoption leads 
in some cases to the existence of both a proof of a proposition and of its negation (e.g. 
p* апа —p*), it tames the proliferation of undesired proofs of propositions belong- 
ing to the paradox-free fragment. However, this requires a major departures from the 
Prawitz-Dummett conception of validity: namely it requires to ascribe semantic sig- 
nificance to the notion of reduction for open derivations, which requires the adoption 
of an extensional conception of functions from proof to proof. 


Notes to This Chapter 


1. In recent years Tennant has further developed his analysis of paradoxes by proof- 
theoretic means (see Note 4 to Chap. 4). However, he did not explored the con- 
nection between the proof-theoretic analysis of paradoxes and the idea that proofs 
are the denotations of formal derivations. 

2. In other words, Prawitz's definition of validity as applied to N1 is a meta- 
linguistic analog of the paradoxical definition of R discussed in Sect. 4.2. 

3. In the type-theoretic setting (see Note 6 to Chap. 4), this means that app(x, y) 
does not denote a total function from proofs of A D B and A to proofs of B, since 
when we replace for x and y the terms corresponding to the derivations ^ and 4 
we obtain the non-denoting term corresponding to R. In the untyped A-calculus, 
this corresponds to the fact that application does not preserve normalizability in 
the untyped setting. 

4. In sequent calculus, this condition is essentially that reductions for a principal cut 
on a formula A (or, in one-sided calculi, on two formulas A and А+ having the 
same complexity) yield one or more cuts on formulas of strictly lower complexity 
than A (and A+). We also remark that, in the light of the considerations made in 
Sect. 4.4, itis clear that this condition is plausible only in presence of contraction. 
In its absence, it is unnecessary restrictive. 

5. The idea that the correctness of an inference rule can be shown by deriving it 
from other, previously accepted, rules, is referred to by Dummett [12] as ‘the 
proof-theoretic justification of first-grade'. A justification of this kind requires 
obviously that some other rules have been previously justified as correct. The 
notion of correctness* embodies this idea, in that introduction rules are correct* 
by fiat; elimination rules are correct* iff they are in harmony with the introduction 
rules; and all other rules are justified using introduction and elimination rules. 
Dummett [12] follows a different path: he rather argues that there must be more 
powerful means of justification which he calls justifications of second and of 
third degree respectively. A justification of third degree amounts to showing that 
whenever a rule is applied to valid closed canonical derivations for the premises 
it yields a valid closed canonical derivation of the conclusion. This essentially 
coincide with showing that the rule is correct in Prawitz's sense, as discussed in 
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Sect. 2.10 (with some caveats due to the different way in which Dummett and 
Prawitz define canonical derivations, see Note 23 to Chap. 1 and Notes 6 and 14 
to Chap. 2). 

6. In a type-theoretic setting, the introduction and elimination rules could be pre- 
sented as follows: 


-— 
E TA tip" 
eof dde(s,t): L 


and the reduction for p* could be internalized with the following equality rule: 
[x : p*] 
til s:p* 
dde(Yx.t, s) = t(s/x) : L 


The derivation @* would be encoded by the term Yx.dde(x, x)and the derivation 
R* by the term dde( Yx.dde(x, х), Yx.dde(x, x) )which resembles even 


more closely than the term associated with & the untyped loopy combinator 
(Ах.хх)(Ах.хх) (see Note 6 to Chap. 4 above). 

7. То see that there is nothing wrong with the notion of pre-formula one could first 
define the notion of immediate pre-formula as follows: (1) the immediate pre- 
formulas of A D B are A and B ; (ii) the immediate pre-formula of р is ~p. 
The notion of pre-formula could then be introduced as the reflexive and transitive 
closure of the one of immediate pre-formula. 

8. As briefly recalled in Sect. 4.4, the notion of cut-free derivation roughly corre- 
sponds to the notion of normal derivation. The conservativity result for natural 
deduction parallels an analogous conservativity result in sequent calculus [79]. In 
that setting, one can take p to be governed by the following left and right rules: 


DU70— А | Г = ~р, А 
Жа асаа у pepe 4 саай 
Г, р= А Г р, А 


Кр 
Let LK, be the extension of the (cut-free) implicative fragment of the sequent 


calculus for classical logic LK, whose rules are: 


Г А, А Г, В = Л 15 Г,А > В, Л 
ADB, Г, Г = А, Л Г АО В, Л 


together with identity, exchange, weakening and contraction (for the present 
scopes, one could equivalently consider an intuitionistic or minimal variant of 
the calculus). The following hold: 
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Fact 7 For and A p-free: Г => А is deducible in LK iff it is deducible in ІК. 


Proof Given the rules for LK, if there is no occurrence of p in the consequence of 
a rule-application then there is none in the premises of the rule-application. Thus if 
the end-sequent of a derivation is p-free, the whole derivation is. шп 


There is however a remarkable difference between the natural deduction and sequent 
calculus approach. In sequent calculus, the same reasoning allows to establish a 
result analogous to Fact 7 for LKtonx, the extension of LK with the following rules 
for tonk: 


r,Boa iterii rsA,A — 
Г,А tonk BSA d Г = А tonk B, ^ коп 


On the other hand, the rules for tonk are not conservative over f y -normal deriva- 
tions in NI?- : the derivation T’ established L іп NI>+*°™* by means of a f y -normal 
derivation. The difference is due to the fact that in natural deduction the addition of 
tonk and p have different effects: the addition of tonk does not invalidate nor- 
malization, but invalidates the canonicity of closed normal derivations; on the other 
hand, the addition of p invalidates normalization but not the canonicity of closed 
normal derivations. To recover the full analogy with the natural deduction setting 
one can consider LK*, LK5 and LK? the calculi extending (respectively) LK, LK, 


tonk? 
and LKtonx with the cut rule. Whereas for the rules for D and р opportune reductions 


can be defined to push applications of the cut rule towards the axioms, this cannot 
be done in the case of the rules for tonk. Consequently, although cut is neither 
eliminable іп К. nor in LKŽ, this would be for different reasons: in LK? one 
would have derivations containing applications of the cut rule which cannot be fur- 
ther reduced; іп LK5 one would have derivations containing applications of the cut 
rule to which reductions can be applied, but that cannot be brought into cut-free form 
due to a loop arising in the process of reduction. By introducing the notion of normal 
derivation as one to which no reduction can be further applied, it would be possible 
to show that whereas the rules for p are conservative over normal derivations in LK*, 
the rules for tonk are not. 
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Chapter 6 A) 
Two Kinds of Difficulties E 


(by Peter Schroeder-Heister and Luca Tranchini) 


Abstract Two distinct kinds of cases, going back to Crabbé and Ekman, show 
that the Tennant-Prawitz criterion for paradoxicality overgenerates, that is, there are 
derivations which are intuitively non-paradoxical but which fail to normalize. We 
argue that a solution to “Ekman’s paradox” consists in restricting the set of admissible 
reduction procedures to those that do not yield a trivial notion of identity of proofs. 
We then discuss a different kind of solution, due to von Plato, and recently advocated 
by Tennant, consisting in reformulating natural deduction elimination rules in general 
(or parallelized) form. Developing intuitions of Ekman we show that the adoption of 
general rules has the consequence of hiding redundancies within derivations. Once 
reductions to get rid of the hidden redundancies are devised, it is clear that the 
adoption of general elimination rules offers no remedy to the overgeneration of the 
Prawitz-Tennant analysis. In this way, we indirectly provide further support for our 
own solution to Ekman’s paradox. 


6.1 From Naive Comprehension to Separation 


In this chapter we discuss two distinct cases in which the Tennant-Prawitz analysis 
overgenerates, i.e. in which it ascribes paradoxicality to derivations of 1 that fail to 
normalize, although they belong to deductive settings of which we know that are too 
weak to allow for the formulation of paradoxes. 

The first case of overgeneration arises in a consistent set theory in which Zermelo’s 
separation axiom is formulated in rule form: 


tes A(t/x) ]q te{xes: A} Б <E 
te{xes: A} = А(ї/х) S tes E 


(the second elimination rule will actually play no role in what follows). We call 
NI2* the system which results by adding these rules to NI?.! 

An application of e*I followed by €*E constitutes a redundancy that can be 
eliminated according to the following reduction (we call the formula eliminated a 
Zermelo-maximal formula occurrence): 
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20 2 

tes A(t /x) єв 2 

“rekes: A] ° AG/x) 
A(t/x) 


What if we now try to reconstruct Russell’s reasoning in this setting? For any set 
y, we can construct a term denoting the Russell subset of y, i.e. the set of all elements 
of y which do not belong to themselves, ry =der (x € y : x ¢ x}. Taking now p, to 
ber, € ry, an application of €*E allows one to pass over from p, to ^py,, but in order 
to pass over from —py to p, using an application of €*I one needs a further premise, 
namely г, € y: 


ryey “py Py 
Py “Py 


€E 


Thus, by following Russell’s reasoning іп NI?® one obtains a derivation of absur- 
ісу L in NI?“ that, contrary to R, depends on an assumption, namely the assump- 
tion ry € y that is needed for the application of є: (for visibility the assumption is 
boxed): 


p 
0, 7 eB 1 
jeg 1 “Py Py 
Py Py DE Р 
—À —L——À- 3k ay 51 (R^) 
(1) р ry € y SLE 
си! 
Py 
DE 


Now assume that existential quantification with its standard rules is available. 
As y does not occur free in the conclusion nor in any undischarged assumption 
other than r, € y, by assuming Jy(r, € у) we can obtain by 3E a derivation of L 
from 3y(r, € y) and by DI we can thereby establish —^3y(r, € y), that is that no set 
contains its own Russell subset: 


py n 
$5 cE 1 
› Б 1 Py Py 3E 
Cy Py J 
T DE д a (1) = DI 
(1) DI : У ед 
“Py Py 
3 DE 
dy(ry € y) all е 
L 


(3) =e ey) DI 


That no set contains its own Russell subset is a perfectly acceptable conclusion 
in a consistent set theory like Zermelo’s. It shows in particular that there is no set 
of all sets, which is something that any set theory based on the separation axiom 
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should be able to prove. However, and here is the problem, the derivation R” of L 
from ry € y (and likewise the one of L from 3y(r, € y)) fails to normalize, for the 
same reason as Russell’s original К. By removing the encircled maximal formula 
occurrence of —p,, a Zermelo-redundant formula is introduced, and by removing 
it, one gets back to R*. So, on the Prawitz-Tennant analysis the derivation does not 
represent a real proof, and (as in the case of the derivation of 1 in naive set theory) 
no other derivation fares better. That is, on the Prawitz-Tennant analysis, though we 
have derivations showing that there is no set of all sets in Zermelo set theory based 
on separation, these derivations are unacceptable as they qualify as paradoxical.? 

These facts were first observed by Marcel Crabbé [3] in 1974 at the Logic Col- 
loquium in Kiel (see [51]) and have been largely neglected in the philosophical 
literature (in particular by Tennant), except for a short reference to them by Sund- 
holm [104]. However, they represent the starting point of modern proof-theoretic 
investigations of set theory see [14, 28]. 


6.2 Ekman's Paradox 


The other kind of overgeneration arises in an even weaker setting: pure propositional 
logic. Suppose we have derived A by means of a derivation Z. By assuming A — B, 
2 can be extended by DE to a derivation of conclusion B. By further assuming 
B 5 A one can conclude A, but this had already been established by 2. The two 
applications of DE just make one jump back and forth between A and B: 


2 


BDA B 


Ekman [15] observed that although the official reductions of МІУ do not allow one 
to get rid of patterns of this kind, such patterns constitute redundancies which can 
be easily removed by identifying the top and bottom occurrences of A and removing 
the two applications of DE between them. We refer to this conversion as Ekman 
and we will call an Ekman-maximal formula occurrence the occurrence of B acting 
as conclusion of the first application of DE and as minor premise of the second 
application of DE in the schema below’: 


D 
ADB A Ekman D 
44 — 5E E 
BDA m 2 e A (Ekman) 
A 
Observe now that ~ А follows from А D ЈА: 
A A А 
ADTA ALE 1 
aA A 
DE 
oo 
aA 
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By further assuming —A D A, the previous derivation can be extended by DE to a 
derivation of A from A D —A and —A D А: 


1 
A2^A A 
aA A 


АРА aA 
A 


The two derivations can be joined together by an application of DE and the result 
is the following derivation of L from A > —A and —A D A (here and below some 
of the rules labels will be omitted for readability): 


1 AD-AA A i 
AD aa A >E | =A A 
1 PED elles B E (E) 
(1) —= 2I 2 3E 
A 
DE 


The derivation E is not normal, since the encircled occurrence of — А is a maximal 
formula occurrence. By applying D-Red one introduces a redundancy of the kind 
observed by Ekman (we encircle in the derivation the Ekman-maximal formula 
occurrence): 


ADA A i 
=. А Аэ-А A | 
ADA а 21 =A А (E) 
m ay + 
AD7A O -ADA -А 
DE DE 
aA A 3E 
ele 
By applying the relevant instance of Ekman: 
2 
TADA aA 2 
мэ uc LC C D E 
a Sedi a DE >è д (6.2.1) 
DE 


aA 


we get back the derivation E. 

Thus, on the natural extension of the set of conversions suggested by Ekman, we 
have a counterexample to (weak and hence strong) normalization already in NIP: 
E is not normal and does not normalize, since its reduction process enters a loop. 
Given the Prawitz-Tennant’s analysis of paradoxes in term of non-normalizability, 
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the phenomenon observed by Ekman should show that paradoxes already appear at 
the level of propositional logic.* 

In fact, Ekman’s paradox can be taken to show that the logical component of 
Russell’s paradox can be fully described using propositional logic. The derivations 
of Russell’s paradox R and R’ can be obtained from Ekman’s derivations E and 
Е’ by suppressing all occurrences of A > —А and —А D А and by replacing all 
occurrences of the schematic letter A with p: In this way, the applications of DE with 
major premise — А D A and A D —A become applications of €I and €E respectively. 
In other words, the id est inferences involved in the derivation of Russell’s paradox 
are simulated by applications of DE in E and Е’, and o ——the instance of €f used 
to transform R' into R—is simulated by the instance (6.2.1) of Ekman used to 
transform E' into E. 

To repeat, the difference between pf and the instance of Ekman triggering 
Ekmans's paradox consists only in the fact that the redundancy is in one case gen- 
erated by id est inferences, whereas in Ekman's case it is mimicked in propositional 
logic by applications of modus ponens. The major premises of modus ponens repre- 
sent the rule applied in id est inferences. As Ekman puts it: 


Whatever motivation we have for [06] this motivation also applies to [the instance (6.2.1) 
of Ekman] since the two reductions, from an informal point of view, are one and the same, 
but expressed using two different formal systems. 


(Ekman [14], p. 148; Ekman [15], p. 78) 


Given this observation, paradoxical derivations can be analyzed as consisting of an 
extra-logical construction which is plugged into a portion of purely propositional 
reasoning. The extra-logical part is constituted by id est inferences which allow one 
to pass over, for some specific p, from —p to o and back. The logical part consists 
of the derivation E of absurdity L from ~A D A and A D —4A, for an unspecific 
(i.e. for all) A. Ekman's paradox would thus show that loops are not a feature of 
the extra-logical part, but of the logical part of paradoxical derivations. The looping 
feature would not depend on the possibility to move, for a certain p, from p to sp 
and vice versa, but that we can move, for any formula A, from ^A D A and A D >A 
to absurdity. 

We do not take this to be the right conclusion to be drawn from the phenomenon 
observed by Ekman. Rather, we take Ekman's paradox to push the question of when 
a certain reduction counts as acceptable: Whether a derivation is normal depends 
on the collection of reductions adopted, and hence Tennant's criterion requires that 
one carefully considers what should be taken to be a good reduction. In particular, 
Ekman's phenomenon shows that on too loose a notion of reduction, one obtains a 
too coarse criterion of paradoxicality. 

Thus, it is not its logical component that makes Russell's reasoning paradoxical, 
but the id est rules encoding naive comprehension. Propositional logic alone is too 
weak to allow for the formulation of paradoxical expression and thereby there cannot 
be anything paradoxical about a derivation in NI2.? 
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6.3 A Solution to Ekman's Overgeneration 


In almost all presentations of natural deduction, reductions are presented as means 
to get rid of redundancies within proofs. This is also the background of Tennant’s 
analysis, who writes: 


The reduction procedures for the logical operators are designed to eliminate such unnecessary 
detours within proofs. 

So are other abbreviatory procedures с, which have the general form of ‘shrinking’ to a 
single occurrence of A, any logically circular segments of branches (within the proof) of the 
form shown below to the left: 


va 
> 


Bn 
A 


One thereby identifies the top occurrence of A with the bottom occurrence of A, and gets 
rid of the intervening occurrences of B1,..., Bn, that form the filling of this unwanted 
sandwich. Logically, one should live by bread alone. 


(Tennant [111], pp. 199-200) 


Given this, Tennant should have nothing to object against the reduction Ekman 
as it is a variant of c. However, the understanding of reduction as “abbreviatory 
procedures” is not the only possible one. We actually claim that this understanding 
is not appropriate for meaning-theoretical investigations, and take Ekman’s paradox 
to be a striking phenomenon that points to this fact. 

As we detailed in Chap. 2, from a PTS standpoint proofs should be viewed as 
abstract entities linguistically represented by natural deduction derivations and reduc- 
tion procedures for derivations can then be viewed as yielding a criterion of identity 
between proofs. 

When one considers conversions besides -reductions and r-expansions, a min- 
imal requirement for the acceptability of a new conversion should be that of not 
trivializing identity of proof, in the sense that is should always be possible to exhibit 
at least one proposition A and two derivations having A as conclusion that belong to 
two distinct equivalence classes (see, for details, Sect. 2.4). If this requirement is not 
met, the intensional conception of PTS we advocated in Sect. 2.6 would collapse into 
a merely extensional picture: for every proposition there would be either a (single) 
proof or there would be no proof at all. On such an understanding, the notion of 
reduction is much narrower than the one arising from taking reductions as “abbre- 
viation procedures”. On this narrower conception Ekman’s alleged conversion turns 
out to be no conversion at all. 

As we recalled in Sect. 2.4, it is well-known that any equivalence relation extend- 
ing £7-equivalence trivializes the identity of proofs in МІУ. As we will now show, 
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Ekman’s conversion is actually sufficient to trivialize the identity of proofs induced 
by D£ alone. 

To begin with, instead of Ekman we actually consider Ekman’s reduction in the 
more general form 


gf 2 
2"! ADB A Ekman* 2 
А Е 
BDA B 3 d A 
ЭЕ 


А 


i.e., we allow for A D B and B D A to be obtained by derivations Z' and 2”. This 
means that we assume, as it is natural to do, that Ekman's reduction is closed under 
substitution of derivations for undischarged assumptions.° 

For simplicity of exposition, we reason in the extension NI^? of NI2. A corre- 
sponding, but less well-readable example could be given in NI2 as well. Consider 
the formulas A ^ A and A and the following proofs of their mutual implications: 


1 1 1 
А А AAA 


= ee Ga Al А AE, 
1) АЛА . A 
0 залау 2! O-AAASA 2! 


Given an arbitrary derivation Z of AAA, consider the following derivation 92": 


2 
А i AAA „кь, 
A A A D 
2 = a) АЛА 2 V CAA)SA 21 AAA _ 
АЭ (АЛА) > А 


Е 
AAA = 


Observe that Z' reduces both to @ (with an application of Ekman*) and to the 
following derivation (with two applications of 26): 


2 2 
AAA АВ; AAA AB 
A A 
AAA 


If we suppose that Z ends with an introduction rule, i.e. that the form of 2 is the 
following (for some arbitrary derivations 2) and 2 of A): 


gi Ф 
А А AI 
AAA 
we thus have that 
Р gi Dr 
0 ЕКтап* 
АлА E д A ^I 
AAA 


and 
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Zi Ф Ф 2 
2 >£ a А ^I A A AD ^h н 21 
а > АЛА АЕ! AnA | A AI 
А a АЛА 
АлА 


respectively. Therefore the adoption of Ekman’s (starred) reduction implies that the 
following two derivations 


Dı Zi Zi Ф 
А А А А 
AAA AAA 


are equivalent with respect to reducibility, i.e. that they represent the same proof. 
This means that also the following two derivations, which result from the previous 
ones by extending each of them with an application of AE»: 


Ф| Ф| Ф| Ф 
А А А А 
AAA АЕ» AAA АЕ» 
А А 


are equivalent with respect to reducibility. If we apply to each of them the reduction 
^fi», we obtain the two derivations 


Zi Ф 
А А 


meaning that 2; and 2, belong to the same equivalence class induced by DB, ^f, 
^p» and Ekman*. Therefore by using Ekman's (starred) reduction in addition to the 
standard reductions, we can show that any two derivations 2) and Y of a formula 
A represent the same proof. As argued above, this is a devastating consequence. If 
we require that reductions do not trivialize the notion of identity of proofs, Ekman's 
transformation does not count as a reduction. 

We thus propose to amend Tennant's paradoxicality criterion by requiring that 
reductions do not trivialize identity of proofs. In this way the problem posed by 
Ekman's result for the Prawitz-Tennant test for paradoxicality is resolved in that 
Ekman's derivation E now fails to count as a paradox.? 

Ekman's “paradox” not only teaches us the importance of an appropriate notion of 
reduction for formulating a proof-theoretic criterion of paradoxicality, but also tells 
us something about the nature of paradoxical propositions. What triggers a genuine 
paradox is not simply the assumption that a proposition is interderivable with its own 
negation, as in Ekman's derivation. A genuine paradox is a proposition A such that 
there are proofs from A to —А and from —A to A that composed with each other give 
us the identity proof A (i.e., the formula A considered as proof of A from A), that 
is a genuine paradox is a proposition which is isomorphic (in the sense of Sect. 2.5) 
with its own negation. 

In conclusion, if one requires that reductions must not trivialize proof identity, 
there are strong reasons to reject Ekman's reduction. Unfortunately, there does not 
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seem to be any immediate way of applying this strategy to solve the other kind of 
overgeneration cases observed by Crabbé. From the perspective of identity of proof, 
there is a strong asymmetry between the two cases, and the overgeneration cases 
observed by Crabbé show a particular resilience. 


6.4 Von Plato's Solution to Ekman 


A different kind of solution to the overgeneration phenomenon observed by Ekman 
was put forward by von Plato [62] and recently reinstated by Tennant [112], who 
showed how it could be used to overcome also the other kind of overgeneration 
cases. For Tennant, this alternative solution is preferable not only because it allows 
one to solve both issues at once, but also because it does not require one to introduce 
criteria to select what counts as an appropriate reduction. The aim of what follows 
is a critical discussion of this alternative solution, which shows, at least, that the 
question of what is to count as an appropriate reduction cannot be evaded so quickly 
as Tennant apparently supposes. 

To clarify our position, we are strongly sympathetic to the Tennant-Prawitz anal- 
ysis of paradoxes, and we do not take the kind of overgeneration observed by Ekman 
as being a real threat, provided the criterion for paradoxality is based on a qualified 
notion of reduction procedure. On the other hand, we do regard the kind of overgen- 
eration observed by Crabbé as problematic (even on our refined formulation of the 
Prawitz-Tennant criterion) and calling for further investigations. 

What we are not at all sympathetic with is the “solution” to both kinds of overgen- 
eration proposed by von Plato and Tennant, which will be shown in the remaining 
part of the present chapter to be, in fact, no solution at all, being flawed by the same 
problems of Tennant’s original proposal. The line of argument developed in the 
remaining part of the chapter is thereby meant as a further—though indirect—reason 
to adopt our solution to the Ekman kind of overgeneration, and to further investigate 
the exact nature of the Crabbé kind of overgeneration. 

According to von Plato [62] the source of Ekman’s problem” is the form of the 
elimination rule for implication, and he suggested that the problem could be solved 
by replacing DE with its general version: 


ADB A C 
C 


We call NI? the system obtained from NI? by replacing DE with 2E,. 

Consecutive applications of the introduction and of the general elimination rule 
for implication also constitute a redundancy that can be eliminated according to 
the following reduction (we call the formula of the form A D B eliminated by the 
reduction an 5,-maximal formula occurrence): 
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n g 

[A] m [A] 

2 [В] 5.8 2 
Bo d c 
(m) gp" 
e C 


In NI? the derivation of Ekman's paradox can be recast as follows: 


I INE BR L (Ej) 


The reduction 5, does not apply to E,. Moreover, neither does Ekman (obvi- 
ously, since E, is formulated with the general elimination rule and not with modus 
ponens) nor any generalization thereof, 


which have the general form of ‘shrinking’ to a single occurrence of A, any logically circular 
segments of branches (within the proof ) of the form shown below to the left 


(Tennant [111], pp. 199-200) 


which Tennant [112] calls subproof compactification. Note that, as Ekman [14] 
already observed, є-Кеа and c*-Red are also instances of subproof compactifi- 
cation (and so are the standard reductions for conjunction of Prawitz [65]), though 
neither D£ nor 5, are. 

On these grounds, von Plato concludes that 


the problem about normal form in Ekman [15] is solved by a derivation using the general 2E 
rule. (von Plato [62], p. 123) 


6.5 Another “Safe Version" of Russell’s Paradox 


Independently of Crabbé, Tennant [108, 109] proposed a weakening of naive com- 
prehension, but in the context of a (negative) free logic. By free logic, one means a 
logic which is free from the assumption that singular terms denote. Using Zermelo’s 
comprehension one wishes to neutralize Russell’s paradox by recasting Russell’s 
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reasoning as showing that no set contains its Russell subset as element. Similarly, 
Tennant wishes to recast Russell’s reasoning as showing that Russell’s term lacks a 
denotation. 

That a term / does possess a denotation is expressed by the formula A!t =4ef 
dx(t = x), and accordingly in (negative) free logic the introduction rule for identity 
is weakened to the effect that t = t can be derived only if one has previously shown 
that г denotes!?: 


Alt 
t=t 


In this setting, Tennant proposes to replace the rules for naive comprehension with 
rules to introduce and eliminate set terms in the context of identity statements. As our 
focus here is not a discussion of set-theoretic paradoxes in the context of free logics, 
but rather of the proof-theoretic analysis of paradoxical derivations, we omit some 
premises and dischargeable assumptions of the form 3!t from Tennant’s rule. In this 
way it is easier to highlight the analogy with von Plato’s solution to Ekman’s paradox 
discussed in the previous section. Observe however that each derivation using the 
rules here discussed should be understood as an abbreviation of a derivation using 
Tennant's original rules. The interested reader can easily reconstruct full derivations 
by adding the (in most cases trivial) subderivations of each of the missing premises 
of each rule application. 

Here is the simplified version of Tennant's rules: 


[AQ /x)] [yes] {x: A}=s A(t/x) n- 
yes A(y/x) n= tes 
071 
and {х:А} = 5 tes JFE 
with y eigenvariable A(t/x) 


We call NI>* the system that results by adding these rules to NI2*.!! 

It is important to observe that in Tennant’s reformulation of the rules of com- 
prehension we have two elimination rules for set terms, and the two elimination 
rules of Tennant correspond respectively to Prawitz’s €I and €E rules. By taking 
s to be {x : A} we have that Tennant's {}“E, allows one to infer t є (x : A} from 
A(t/x) together with the premise (x : A} = {х : A}, and that {Е allows one to 
infer A(t/x) fromt € (x : A} together with the premise {x : A} = (x : A}. (The extra 
premises can be regarded as expressing the requirement that {x : A} is a denoting 
set term: are remarked above, in contrast to predicate logic in which t — f is always 
derivable for any term ¢, in free logic such premises need to be derived from the 
assumption 3!(x : AJ.) 

Redundancies constituted by consecutive applications of the introduction rule 
followed immediately by the corresponding elimination rule can be eliminated using 
the obvious reductions. Moreover, consecutive applications of the two elimination 
rules give rise to Ekmanesque redundancies of which one can get rid using the 
following reduction (we call respectively Ekman~ and Ekman" -maximal formula 
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occurrence this transformation and the occurrence oft € s inthe schematic derivation 
on the left-hand side): 


2 
{х: А} = 5 A(t/x) = ain GQ 
н X - (Е > 
{х: А} = 5 tes (^E; A(t/x) 


A(t/x) 


To reconstruct Russell’s reasoning in this further setting Tennant suggests to 
choose both ¢ and s to be some variable y and to take A to be the formula —^(x є x). 
One thereby obtains the following instances of {}~E,, {} E» (as before we abbreviate 
Russell’s term (x : ^(x € x)} with г): 

r=y =Q Ey) rey yey 


= cr UB 
yey ores (у є у) иы 


By abbreviating у € у with v, we can reason as in Ekman’s derivation Е апа 
thereby construct a derivation of L depending on the assumption r = y: 


1 r=y v 
r=y v (Е 1 
05 Д TU Е 3E 
— 2 NN 0) -+ (R^) 
(1) DI r= TY ев, 
Сә v 
DE 


As in К”, the variable y in R^ occurs free neither in the conclusion nor in any 
undischarged assumption other than r — y. In the presence of the rules for the exis- 
tential quantifier, the derivation R^ can thus be extended by JE and DI to a closed 
derivation of ~4x(r = x) that establishes that ғ has no denotation. 

However, as in Ekman's E, the encircled occurrence of ^v is a maximal for- 
mula occurrence. The reader can easily check that by getting rid of it using 26, an 
Ekman- -redundant formula occurrence is introduced. By getting rid of it using the 
following instance of Ектапт: 


D 
r=y m re = g 
"- L— ов €"-— 07 
(7E; 
“y 


one gets back to К>. As in the previous cases, in spite of its innocuous character the 
derivation fails to normalize. This overgeneration case seems a perfect blend of the 
two previously discussed, and Tennant [112] showed how the (purported) solution 
of von Plato to Ekman's case can be applied also to this one. Let us replace the 
elimination rules {}~E; and {Е with their general versions (we call the resulting 


T2€ M 
system МІ." ): 
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[t € u] 


{х:Ар=и А(ї/х) С (Eig 
C 
[A(/x)] 
(x:A)2u teu C =, 
C 


Taking as before t and s to be y and A to be —^(x є x), one thereby obtains the 
following instances of {}~Ej,, апа {} E», (as before r abbreviates Russell's term 
{x : ^x € x)}): 


[у € y] [^(» € »] 


r=y (y € y) C (FE: r=y yey C 
g 
C C 


Ü^ E» 


Using them one can give the following (apparently) redundancy-free derivation of 
1 from r = y (as before v abbreviates y € y)!*: 


(Rz) 


An application of JE followed by one of DI yields a closed normal derivation of 
—Hdx(r = x). 


6.6 Ekman on Decomposing Inferences 


Although we believe that the Prawitz-Tennant analysis undoubtedly provides the 
basis for a proof-theoretic clarification of the phenomenon of paradoxes, we do not 
find the way out of the overgeneration cases proposed by von Plato and Tennant 
satisfactory. 

It is true that in the derivations E; and R7’ no subproof compactification is pos- 
sible. However, as we will now show, it is still possible to detect some redundancies 
which are hidden by the more involved shape of derivations constructed with general 
elimination rules. By defining procedures to get rid of these hidden redundancies, 
Ekmanesque loops will crop up again. In the remaining part of the chapter this 
suggestion will be made precise. 


134 6 Two Kinds of Difficulties 


The possibility of reformulating his “paradox” using general elimination rules was 
clearly envisaged by Ekman in his doctoral thesis, where he introduces the notion of 


“decomposing inference’: 


Let II and A designate the premise deductions and conclusion of a rule R respectively. That 


is, R is the inference schema: 
п 
А R 


We obtain the corresponding decomposing inference schema Rp as follows. 


We obtain the premise deductions of the inference schema Rp by adding one deduc 


tion 


& to the premise deductions of the R schema, where & designates a deduction in which 
occurrences of the conclusion A of the R schema, as open assumptions in & may be cancelled 
at the Rp inference. If, in the R schema, B designates an open assumption in any of the 
premise deductions П and В may be cancelled at the К inference, then in the Rp schema, В 
also designates an open assumption of the same premise deduction and B may be cancelled 
at the Rp inference. (Ekman [14], pp. 9—10) 


Obviously, in the case of DE, the decomposing inference DE p is just the general 


rule DE,.3 


Ekman [14, p. 10] introduces the notion of a simple deduction corresponding to 
one with decomposing inferences by giving an informal, though precise description of 
a procedure for translating derivations with decomposing inferences into derivations 


with the corresponding “simple” inferences. When restricted to the systems N1 
NI, Ekman's translation amounts to the following (the definition is by ind 


on the number of inference rules applied in a derivation)!^: 


1. If Z is an assumption, then Z* = 2 
2. If 2 ends with an application of 5E,, i.e. it is of the following form: 


n 
[В] 
2 D 23 
(n) ADB =< С >E; 
then Y has the following form: 
2 23 
ADB A 
Е 
[8] 
2; 


C 


[2 and 
uction 
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3. If 2 ends with an application of DI, then 9° is obtained by applying DI to the 
translation Z of the immediate subderivation 2, of 2. 


At this point Ekman writes: 


Let # and ./ be a deduction with decomposing inferences and its corresponding simple 
deduction, respectively. Then indeed, # and . both represent the same informal argument. 
The difference is only a matter of the display of the inferences. Therefore it ought to be the 
case that # is normal if and only if # is normal. (Ekman [14], p. 13) 


The translation (Ej)* of von Plato's derivation E, into NI2 is indeed E'. It is 
beyond doubt that the quoted passage hints at the possibility of extending the set of 
conversions of NI? so that on the extended set of conversions von Plato’s derivation 
E, fails to normalize as well. 

To this we now turn. 


6.7 Implication-as-Link and General Ekman-Reductions 


As a starting point, we recall Schroeder-Heister's [88] proposal to distinguish 
between two ways in which the assumption of an implication can be interpreted: 
Implication-as-rule and implication-as-link. In natural deduction the two interpreta- 
tions correspond to the two distinct forms that the rule of implication elimination 
may take (see also [92 ]). 

The adoption of 5E yields the implication-as-rule interpretation. Suppose we 
have a derivation Z of conclusion A. By assuming the implication A 5 B we can 
extend Z as if we had at our disposal a rule К allowing one to pass over from A to 
B: 


2 
А 


2 
А 
DE B 


B 

On the other hand, the adoption of DE, does not amount to assuming only the 

tule to pass over from A to B, but rather to assuming also the existence of a link 
connecting two distinct derivations: 


2 
n A R: ASB 
ADB A C Н 
(n) C ОЕ, [В] 
[74 
с 


Applications of the rule Ё correspond—even graphically—to the application of 
DE. This is not so in DE,, where there is nothing in the structure of the rule which 
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can be said to correspond to the application of the rule to pass from A to B. The 
transition from A to B remains implicit. 

The implicit link in DE, between the two subderivations Z and J’ is a form of 
transitivity: if B can be derived by means of Z from a set of assumptions Г (among 
which the rule R that allows one to pass over from A to B), and C can be derived by 
means of Z' from some other set of assumptions A together with (a certain number 
of copies of) B, then C can be derived from Г and A alone. 

We wish to defend the claim that the transitivity principle encoded by DE, hides a 
redundancy in the derivation E,. In fact, Ekman [14] himself refers to decomposing 
rules as ‘cut-hiding’. 

To state this intuition in a more explicit manner we take seriously the idea that 
in DE, the minor premise A is linked with the assumptions of form B which are 
discharged by the application of the rule. 

Certain configurations of two consecutive applications of DE, may thus be viewed 
as constituting a redundancy. Consider for instance situations of the following kind: 


[A] 


(m) 


The formula A which is the conclusion of Z is linked by A D B to the discharged 
occurrence of B marked with m. This in turn is linked by B A to the discharged 
assumptions A marked by и. In other words, the two applications of the general 
elimination rule make one jump from A to B and back in a quite unnecessary way. 
This intuition, which is essentially Ekman's, can be spelled out by defining a new 
conversion to get rid of redundancies of this kind. 

By directly linking together 2 and 2’, both applications of DE, could be elimi- 
nated as follows: 


However, this is only possible if in the original derivation no other occurrence of B 
is discharged in Z' by the application of DE, marked with т. 

If such occurrences of B are present, then the lower application of 5E, is still 
needed in order to discharge them. This is perfectly reasonable, since these occur- 
rences of B do not belong to the detour generated by the links of the two applications 
of DE,. We take the following reduction to be what in NI? corresponds to Ekman 
(the occurrence of B in the leftmost derivation constituting the redundancy is encir- 
cled and will be called an Ekman,-maximal formula occurrence): 
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[A] [B] 
п 2 Ekmang 
2 BDA c > 
ADB a ™ C ОН: 
(п) С ОЕ, 
2 п 
"T [A] [В] 
> 2 2 
(n) ADB A C 5E, 


Observe now that von Plato's E, contains an Ekman,-redundant formula occur- 
rence (encircled): 


(Ej) 


The redundancy can be eliminated using the following instance of Ekman,: 


Я п 
‚ [>A] [А] 
z 2 Ekman _ 
9 (m) A»-A (2) 1 > g g 
m -ADA ~A n 
(ny 2424.74 l (n) - 
n 


The encircled occurrence of ~A is the conclusion of an application of DI and the 
major premise of an application of DE, and thus itis an 5,-redundant formula occur- 
rence. By applying 2,8 to this derivation, one gets back to E,. That is, by enriching 
the set of conversions with Ekman,, the process of normalizing the derivations Eg 
and E, gets stuck in a loop in the same way as that of the derivations E and E’. As 
already observed in Sect. 6.6, E’ is the image of E, under the translation ()* from 
NI? to МІУ, and as the reader can easily check the same is true of E and Eg. 
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It is easy to see that the foregoing line of reasoning can be extended in a straight- 
forward manner to Tennant’s derivation R; in NIST, In particular, the remarks 
on the cut-hiding nature of DE, can be applied to Tennant's (]-E,; and (J^ E» as 
well. Hence, we can define the general version of the Ekman' -reduction depicted 
in Table 6.1. 

The derivation RZ’, like E,. contains a hidden redundancy that can be eliminated 
using Ekman™. As the reader can check, by applying the reduction one obtains a 
derivation that, like Es, contains an 5,-redundant formula occurrence. By eliminat- 
ing it using 5, f one gets back to Tennant's к. Moreover, the translation ()*, map- 


ping NI?-derivations onto NI2-derivations, can be easily extended to a translation 


Q* mapping NE -derivations onto NI?* -derivations. The image of Tennant’s 
derivation RU and of the derivation to which RU reduces via Ekman, are Tennant's 
[108, 109] derivations R=’ and R= respectively. 


6.8 Copy-and-Paste Subproof Compactification 


As observed by Tennant, both Ekman and Ekman-' are instances of the general 
reduction pattern called by Tennant subproof compactification. Crudely put, the 
adoption of general elimination rules has the result of chopping up derivations and 
scattering around their subderivations. As a consequence, it is natural to generalize 
subproof compactification to a reduction pattern that could be called copy-and-paste 
subproof compactification: if a derivation Z contains a subderivation Z' of A and 
some assumptions of the form A are discharged in 9, the result of replacing Y’ for 
the discharged assumptions of A may bring to light hidden possibilities of applying 
subproof compactification. Although some subderivations may have to be copied in 
the process, the overall result will be a derivation depending on less assumptions 
than the original one and containing less (explicit or implicit) redundancies. 

Instances of copy-and-paste sub-proof compactification are not just the conver- 
sions Ekman, and Ekman;, but also all other known reductions, in particular D£ 
(and 5,8), that could be analyzed as consisting of one (respectively two) step(s) 
of “copy-and-paste”, where the “copy-and-paste” operation could be schematically 
depicted as follows: 


followed by one step of subproof compactification. In the case of 5-Red, we would 
have: 
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81 
a-ü 2 (x/DV = (у: х) 


‚© 6 
[s 2 7] [«/й)у] 
5 
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n g' 
[A] [A] g 
2 ği ч 2 ч [А] 
(п) DI B 1 2 2 
ADB A 2 
ADB A B 
B DE 2 DE 


6.9 General Introduction Rules and Ekman, 


It may be retorted that, compared to Ekman’s original conversion, the conversion 
Ekman, is much less straightforward, and one may wonder whether in the end, it 
is not just artificial. We rebut this criticism by observing that Ekman, is just as 
plausible as Ekman. Or at least, that this is the case if one (like von Plato himself) 
is willing to accept not only general elimination rules but general introduction rules 
as well. 

According to Negri and von Plato [53], not only elimination rules, but also intro- 
duction rules can be recast in general form, according to the following idea: “General 
introduction rules state that if a formula C follows from a formula A, then it already 
follows from the immediate grounds for A; general elimination rules state that if 
C follows from the immediate grounds for A, then it already follows from A." 
(ibid. 217).? 

For example, the Prawitz-Gentzen introduction and elimination rules for conjunc- 
tion are recast in general form as follows: 


[A ^ B] [A][B] 
AAB C 


Milne [47] argued for the significance of these rules for the inferentialist project of 
characterizing the meaning of logical constants through the inference rules governing 
them. In this context he suggested reductions to eliminate consecutive applications 
of the general introduction and elimination rules for a connective. In the case of 
conjunction, Milne's proposal amounts to the following transformation: 


my m 
[A] [B] Zi» 
g [A][B] 
G G > 
Ф 2 bonia AAB C ^B; 
(n) 4 B c E AT, C 


However, one cannot exclude that the application of the general introduction rule 
labeled with (n) discharges some occurrences of A ^ B in Z' as well. Such further 
occurrences (if any) are not part of the redundancy, and the application of AI, would 
still be needed to discharge them. The solution consists in revising Milne's proposed 
reduction as follows'®: 
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my m2 n Y 
[A] [B] [A ^ B] | aA, 
B\[AAB 
| d di И B] 
Zh AAB С d A 2 2 
ПЕК aa A B С л 
(п) C Alg (п) С М 


The conversion ^g В certainly has the flavor of Ekman,. To spell out the analogy 
between reductions for general introduction-elimination patterns and Ekman, in 
full, we consider the general version of the introduction and elimination rules for 
naive set theory of Prawitz: 


[t € (x : AH [A(t/x)] 


A(t/x) C el te {x: A} C cE 
8 8 
С С 


and the reduction єс В associated with €I, and €E; (we call €g-redundant formula 
occurrence the encircled formula occurrence): 


[А@/х)] [r € (x : AI] 


n 2 
=. m P ai ` 
п a g 

D 
[A(t/x)][t € {x : A}] 
€g-Red 
> 2 2 
(л) А(ї/х) = С el, 


By removing all occurrences of —A D A and of A D —4A from von Plato's E, and 
replacing all occurrences of A with occurrences of p, all applications of DE, with 
major premises ~A D A and of A D —A in E, are turned into applications of the 
following instances of €I, and €E; respectively: 


[o] [=p] 
Ба C р 2 C 
C C 


€E, 


Thus E, becomes the following derivation of L in the system obtained by extend- 
ing NI? with єї, and €E, (we call it NIZ)”: 
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2 3 1 
=p p ES 5 6 4 
з (0) DE, ~œ P i 
1 6 4 DE 
(2) © - cE, О 4) i { 
(3) EX DI (5) Т cE, 
6 el 
(6) т g ‚ 
(Ro) 


The derivation RG in fact contains an €g-redundant formula occurrence (encir- 
cled). To eliminate this redundancy we can apply the following instance of €g-Red: 


m n 


[=pllp] 2 a 
a g! [elle] 
C > D 2 
2 (т) © C €E, =p С 1 
m =p el, (n) c el, 


As the reader can check, one thereby introduces а new D,-redundant formula 
occurrence. By getting rid of this redundancy using 2,8 one gets back the derivation 
К; from which one started. 

The relation between the relevant instances of єс-Кеа and of Ekman, is exactly 
the same as that between the relevant instances of €-Red and of Ekman. Thus, as 
Ekman's reduction can be seen as encoding Russell’s paradox in МІУ, the general 
Ekman reduction we propose can be seen as encoding the version of Russell's paradox 


with general rules in NI7. 


6.10 Conclusions and Outlook 


The addition of the conversion Ekman to the standard set of reductions for NI2 
(consisting of D£ alone) results in counterexamples to normalization. These can 
be viewed as simulations in the propositional setting of the counterexamples to 
normalization in the extension of NM with Prawitz's rules for naive set theory. The 
"safe" version of Russell’s paradox proposed by Tennant [108, 109] faces the same 
problem as soon as one considers— besides reductions to get rid of introduction- 
elimination redundancies—the further reduction Ekman'. 

Replacing standard elimination rules with their general versions does not help. 
As we have shown, it is possible to define general versions of the Ekmanesque 
reductions, that can be seen as simulating the reduction for general introduction and 
elimination rules for naive set theory. Using these reductions, Ekman's paradox and 
Tennant's safe version of Russell's paradox fail to normalize even when formulated 
using general elimination rules. 

As we pointed out in the first part of the chapter, we take these phenomena to call 
for a thorough investigation of criteria of acceptability for reduction procedures. In 
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particular, we proposed as a (minimal) criterion that reductions must not trivialize 
the notion of identity of proofs induced by the standard reductions. 

On such an understanding of reductions, neither Ekman nor its variants are 
acceptable, but only reductions to get rid of introduction-elimination patterns. Thus, 
Ekman’s derivations do not qualify as paradoxical, nor does Tennant’s safe version of 
Russell’s paradox, independently of whether standard or general rules are adopted. 

As remarked, the phenomenon observed by Crabbé is however unaffected by our 
proposed constraint on reductions, thus showing that further work is required for a 
thorough analysis of paradoxes along the lines of the Prawitz-Tennant analysis.'® 


Notes to This Chapter 


1. Since we will make no use of LE in this chapter, we assume to be working 
in extensions of NI^, rather than of NI?+ as we did in the previous chapters, 
thereby taking L to simply be a distinguished atomic proposition. 

2. Although this is undoubtedly a case of overgeneration for the Prawitz-Tennant 
analysis of paradoxes, itis worth stressing that, if we judge whether the derivation 
К” denotes a proof using the notions of validity developed in the previous chapter, 
we have that although the derivation turns out not to be valid** according to 
Definition 5.5 it would qualify as valid* according to Definition 5.2. In the 
present chapter, the issue of validity is left on the background, as the goal is 
that of sharpening the original Prawitz-Tennant analysis according to which a 
paradox is a non-normalizing derivation of 1. 

3. We observe already now that there is a fundamental distinction between Ekman 
and, say, D£ in that the latter is a means of getting rid of an application of an 
introduction rule followed by an application of the corresponding elimination 
and it thus an immediate consequence of the harmony governing the two rules. 
Not so for Ekman, that may thus be seen as lacking a prima facie plausible 
meaning-theoretical justification. This remark will be fully exploited in Sect. 6.3 
below to untrigger the kind of overgeneration discussed in this section. 

4. Observe that the loop is not only a feature of the particular derivations E and E’. 
Ekman demonstrated that in МІ? there is no derivation of L from A D ЈА and 
^A D A, which is normal with respect to Df and Ekman. 

5. Elia Zardini observes that the derivations E and E' are paradoxical because there 
are instances of them which are paradoxical. Observe however, that R and R' are 
not simply instances of E and Е’, as they do not arise by simply instantiating A 
with o, but moreover by replacing the assumptions ~A D A and A D —A with 
genuine inferential steps, and it is to these steps that the source paradoxicality 
is—in Tennant’s intentions—to be ascribed. 

6. As we show in Note 8 even without this generalization a corresponding coun- 
terexample can be given. 

7. A substantially equivalent counterexample in the purely implicational fragment 
can be obtained using the formulas A D (A D B) and A D B. 
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8. In defense of Ekman, one might argue that he formulates his reduction with 
A > B and B 5 A inassumption position according to Ekman, whereas to show 
that his reduction trivializes identity of proofs we considered the generalized 
form Ekman*. This generalized form is closed under substitution of derivations 
for open assumptions. Now it is hard to make sense of a notion of reduction 
not closed under substitution in this sense. However, the following example 
demonstrates our trivialization result even without this assumption, on the basis 
of Ekman's reduction in the form Ekman. The following derivation (encircled 
is an Ekman redundant formula): 


21 Dr 
A A 
2 Al 
(ANA)DA АЛА 
DE 
AD (AAA) © 
Uu 26 А AB 
Q5üAA UAR — 3 A 1 А А 
) (443535050^23)504A5- i 3) плаза 2l AA AI 
DE (4 DI 


(A2(A^A)) 2 (A^ A) 


AAA 


reduces via Ekman to the following (in which the applications of DI without 
numeral do not discharge anything): 


21 225 
A A 3 
LLL ANA AAA 
(AD (Ал A) 2 (A^ A) 2l 3 ДЕ! 5 4 
(AAA) 5 A) 5 (АО (A^ A) о (Ал A)) (3) (AAA)DA 21 4 AAA I 
(AD (А л А)) о (Ал А) 4) A2(A^A) 2 


AAA 


which in turn reduces via two applications of D£ to 


On the other hand, by applying first > 6 (for four times) and then ^f, (twice) to 
the first derivation one obtains 
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10. 


11. 


12. 


13. 


are equivalent with respect to reducibility even when one adopts the restricted 
form of Ekman’s reduction. Thus the restricted form of Ekman’s reduction is 
sufficient to trivialize identity of proofs (by the argument given in the main text). 


. It should be observed that von Plato [62] is not in the least interested in the issue 


of paradoxes, and regards Ekman’s phenomenon as a problem for normalization 
in minimal propositional logic. 

Similar modifications of the rules of the quantifiers are required as well, see, e.g., 
Tennant [108, Sect.7.10]. Note that the qualification “negative” is essential, as 
in positive free logics t = t holds also when ft is a non-denoting term, see for 
details. 

For the present purposes, no substantial use we will made of the rules for the 
existential quantifier. 

Alternatively, by taking A to be ^x є x and both и and ft to be Russell’s term г, 
one obtain the following pair of instances of {}~Ej,, and {} E»,: 


[rer] [^(r € r)] 


r=r -(r € r) C (Ei, r=r rer С (^E; 


C C 


from which one can construct a derivation of 1 from r = r having the same 
form of the derivation к. As observed above, in free logic r = r does not 
come for free, but it rather has to be derived from i!r, i.e. from dx(r = x). 
By an application of DI one therefore obtains another closed normal derivation 
of —3x(r = x). This derivation is discussed in Tennant [115, Sect. 6] albeit in 
slightly different form. The consequence of applications of {}~E), are atomic 
formulas, and hence cannot be themselves major premises of an application of 
an elimination rule. For this reason, the rule need not be put in general elimina- 
tion form to guarantee that major premises of elimination rules stand proud as 
required in Core Logic (see Note 16 to Chap. 3). Similar considerations apply 
to applications of DE with major premise —A. In spite of the hybrid use of 
general and standard elimination rules, the considerations to be developed in the 
remaining part of the chapter apply, mutatis mutandis, to this derivation as well. 
The two notions of general rule and decomposing inference do not in general 
coincide, since according to the schema given by Ekman the decomposing infer- 
ences associated with the conjunction elimination rules of Gentzen [20] and 
Prawitz [65] differ from the (more commonly adopted) single elimination rule 
considered by Schroeder-Heister [85] following Prawitz [69]: 
[A] [В] [А] В] 
AAB c АЛВ C AAB 


ЛЕ] ЛЕ2 р ARB ©, AEPSH 
C C C 


(AE,p and AE»p are in fact the elimination rules for conjunction one would 
obtain by JR-inversion, see Sect. 3.7.) It is finally worth observing that the 
notion of decomposing inference is not restricted to elimination rules only. When 
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14. 


15. 


16. 


17. 


18. 
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applied to introduction rules, it yields what Negri and von Plato [53, pp. 213ff.] 
called general introduction rules. More on this in Sect. 6.9. 

Here we are not assuming derivations to be normal, as in Tennant’s Core Logic 
(see Note 16 to Chap. 3). Hence, the major premises of DE, need not be assump- 
tions. 

In fact, general introduction rules are nothing but the decomposing inference 
corresponding to the usual introduction rules according to the pattern proposed 
by Ekman given in Sect. 6.6. 

Kiirbis [39] is also aware of the difficulty in Milne’s original reductions. He 
gives a proof of the normalization theorem for an intuitionistic natural deduction 
system with general introduction and elimination rules using slightly different 
reductions than the one here presented. 

To obtain a derivation in a system in which all rules are in general form, one 
should have to add an extra discharged premise in correspondence of the appli- 
cation of DI so to turn it into an application of DI,: 


1 
[A] 


[A] 
g жек 2 2 
ИЕ L -А 
— 1, 2) —— — —— 21 
(1) 6-01 (1,2) = s 


Further investigation is also needed to clarify the exact relationship between the 
Prawitz-Tennant analysis of paradoxes based on normalization failure and the 
solution to paradoxes consisting in restricting the use of the cut rule in sequent 
calculus, a solution which goes back at least to Hallnäs [29] and that has been 
recently brought up again by several authors, notably Ripley [79]. Given the close 
correspondence between normalization in natural deduction and cut elimination 
in sequent calculus, the solution to paradoxes arising from restricting to nor- 
malisable derivations can certainly be seen as anticipating current non-transitive 
sequent-calculus-based solutions (see also Note 8 to Chap. 5). The adoption of 
general elimination rules called for by Tennant brings the two approaches even 
closer, given that general elimination rules more directly correspond to sequent 
calculus left rules than standard elimination rules. The results presented in this 
chapter, however, suggest that the relationship between two two approaches is 
not as obvious as one may assume. Von Plato’s and Tennant’s derivations cor- 
respond to cut-free derivations, and thereby it is prima facie unclear to which 
sort of transformation on sequent calculus derivations, the reductions we pro- 
posed correspond. Moreover whereas in natural deduction we have two kinds 
of derivations (normalisable and non-normalisable ones) in sequent calculus, by 
ruling out the cut rule from the outset (as Ripley, but also Tennant in his most 
recent work, recommend to do) no such distinction is available, and hence the 
original Tennant-Prawitz criterion for paradoxicality based on looping reduction 
sequences cannot immediately be reformulated in a cut-free setting. Arguably, 
by allowing cut as a primitive rule, a distinction analogous to the one available in 
natural deduction can be formulated in sequent calculus as well (that is, between 
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derivations for which the cut-elimination procedure does or does not enter a 
loop) and the reductions for general elimination rules can find a counterpart in 
the sequent calculus setting as well. But a thorough investigation of these issues 
must be left for another occasion. 
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Concluding Remarks 


In the first part of this work we introduced the idea of harmony starting from general 
considerations about the architecture of a theory of meaning. We then introduced 
the idea that in the natural deduction setting, the notion of harmony can be made 
precise in terms of certain transformation on the structure of derivations, reductions 
and expansions. We have shown how a cluster of formal results about reductions in 
natural deduction can be interpreted through the lens of a broadly Fregean concep- 
tion of meaning. In the resulting picture formal derivations are viewed as linguistic 
representations of abstract proofs, and the transformations on derivations arising in 
connection with harmony are understood as preserving the identity of the proofs 
denoted by the derivations to which they are applied. We argued that the charac- 
teristic trait of this semantic picture is its intensional nature. Intensionality is here 
understood in at least two different senses: first, the proposed conception of proof- 
theoretic semantics delivers a finer grained analysis of consequence than traditional 
ones, in that it allows one to distinguish between different proofs of a formula or con- 
sequence claim; second, it allows to define a notion of isomorphism, a finer grained 
equivalence relation between propositions than mere interderivability. 

After having successfully solved the problem posed by quantum disjunction for 
this account of harmony, we discussed several procedures—to which we referred with 
the term ‘inversion principles’—to define, given a collection of introduction rules, a 
collection of elimination rules for which reductions and generalized expansions can 
be uniformly defined. Reflection on the structure of the elimination rules generated by 
inversion suggests that the fact that the introduction and elimination rules for a certain 
kind of propositions are in harmony means that the set of proofs for these propositions 
are defined by induction, and in particular the elimination rules obtained by inversion 
play the role of the final clause of inductive definitions. We concluded the first part 
of this work by discussing the fact that, although the rules obtained by means of an 
inversion principle can plausibly be seen as harmonious, inversion does not deliver 
an exhaustive characterization of harmony. We examined the proposal, implicit in the 
work of several authors, and explicitly advocated by Schroeder-Heister, that harmony 
should be defined by coupling inversion with intederivability: a pair of collections 
of introduction and elimination rules is harmonious iff the elimination rules are 
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interderivable with those obtained from the introduction rules using inversion (here 
the choice of the inversion principle does not matter, as different inversion principles 
yield interderivable collections of elimination rules). We dubbed the resulting notion 
‘harmony by intederivability’ and we showed that harmony by interderivability is not 
satisfactory from the intensional standpoint we advocated. In particular, we discussed 
a collection of rules in harmony by interderivability but such that the reductions and 
expansions associated with the rules yield a trivial notion of isomorphism. 

The second part of the present work was devoted to an issue of an apparently 
rather remote nature: namely that of paradoxes. The discussion of paradoxes turns 
out however to be intimately connected with different elements of the proof-theoretic 
picture developed in the first part of the work. 

First, our starting point is what we called the Prawitz-Tennant analysis of para- 
doxes, which identifies paradoxes with derivations of a contradiction that cannot be 
reduced to normal form. The process by means of which a derivation is reduced to 
normal form is, in semantic terms, the process of assigning to it its denotation. We 
thus propose to rephrase the Prawitz-Tennant analysis in semantic terms as the claim 
that paradoxical derivations are non-denoting expressions. 

Second, on the traditional conception of proof-theoretic semantics, preservation 
of provability is taken as a definition of correctness of rules. This not only reverses the 
most natural order of conceptual dependency (according to which a proof is defined 
as what is obtained by applying correct inference rules). Moreover, it prevents the 
applicability of proof-theoretic semantic to languages equipped with paradoxical 
expressions. In such languages, inference rules which we intuitively acknowledge as 
correct fail to “preserve normalizability". That is, when these inferences are applied 
to derivations that normalize (i.e. that denote a proof) they yield derivations which 
need not normalize (i.e. that might fail to denote a proof). We therefore propose 
that the notion of correctness should be defined independently of preservation of 
provability by appealing to the notion of harmony. Harmonious rules are correct by 
definition, and the fact that they preserve provability is a welcome feature which 
however need not hold in all circumstances. 

Finally, the question of which transformations on derivations should be regarded 
as acceptable from an intensional point of view is extensively discussed. On the 
one hand, it is shown that on too coarse a notion of reduction the Prawitz-Tennant 
criterion overgenerates (i.e. it ascribes paradoxicality also to derivations about which 
there is nothing paradoxical). On the other hand, it is shown that different choices 
of criteria of identity for open derivations (which represent functions from proofs of 
their assumptions to proofs of their conclusions) yield different results concerning 
the conservativity of paradoxical expressions. 

The present work leaves several issues open. One is that of giving an exhaustive 
account of harmony compatible with an intensional conception of proofs (for a recent 
fully-fledged proposal see [61]). Another is that of which are the most appropriate 
criteria of identity for open derivations. The answers to further questions depend on 
this, notably that of which derivations should be regarded as those that denote proofs 
in the most direct way possible. 
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Moreover, the investigations in the present work were restricted to calculi of 
natural deduction for propositional languages. A challenge for the intensional account 
of proof-theoretic semantics is the possibility of being applied beyond the scope of 
purely propositional languages, by considering not only language containing first- 
and second-order quantifiers, but also specific theories, such those for arithmetic. The 
latter in particular seem to offer a “real-world” setting to test not only the general 
tenability of the proof-theoretic conception of meaning, but also of the account of 
paradoxes developed in the second part of the present work. 

Another interesting line of research is that of more thoroughly investigating the 
possibility of applying the ideas here developed to other proof-theoretic formalisms, 
and in particular to sequent calculus. In recent years, the adoption of sequent calculus 
has become predominant in the philosophical literature, due to its greater flexibil- 
ity over natural deduction. As is well known, standard natural deduction assigns a 
distinguished role to intuitionistic logic, and hence it is often associated with “revi- 
sionary” theses concerning logic and meaning. Sequent calculus may thus be the 
instrument for bringing the conceptual tools developed by proof-theoretic semantics 
(and in particular by its intensional variant that was here advocated) to the realm of 
classical logic. 

We hope that the results obtained in the present work—and the lines of further 
investigation here envisaged—show how questions related to identity of proofs are 
a key to disclose the intimate connection between meaning and proof. 


Appendix А 
The Calculus of Higher-Level Rules 


Abstract In this technical appendix we spell out the formal details of the calculus 
of higher-level rule first introduced by Schroeder-Heister. The presentation follows 
that of [85] rather than that of [86], with some differences that will be highlighted 
in due course. We will make fully precise some technical notions concerning the 
derivability of rules and one of the inversion principles discussed in Chap. 3. 


A.1 Some Preliminary Remarks 


The calculus of higher-level rules introduced by Schroeder-Heister [85, 86] is a proof- 
theoretic framework which generalizes the natural deduction calculi of Gentzen [20] 
and Prawitz [65] in two respects: (i) not only formulas but also rules can be assumed in 
the course of derivations; (ii) when applying a rule in a derivation, not only formulas 
but also (previously assumed) rules can be discharged. 

This yields a hierarchy of different rule-levels at the base of which we have the 
limit case of formulas (rules of level 0), and production rules (rules of level 1, such 
as AL, ЛЕ, AE? and DE). 

A typical example of a rule of level 2 is DI, which allows the discharge of formulas 
(i.e. of rules of level 0). Informally, the content of this rule is that in order to establish 
A D B one need not be able to infer B outright, but it is enough to be able to infer 
B from A. As this possibility is exactly what is expressed by the rule allowing the 
inference of B from A, we adopt the terminological convention that the premise of 
»lIis not B, but rather the rule that allows one to pass over from A to В (for the role 
played by B in DI we will use the term ‘immediate premise"). 

In general, the premises of rules of level / > 1 will be rules of level / — 1 and 
for each level / > 2, the application of a rule of level / in a derivation will allow the 
discharge of rules of level / — 2. 
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The presentation of the calculus of higher-level rules given below follows quite 
closely that of Schroeder-Heister [85], but with a major difference, namely the han- 
dling of discharge. In [85] the details of discharge are left implicit (the definition 
of ‘derivation of A depending on M’, on pp. 50-51, implicitly adopts the so-called 
complete discharge convention, see Troelstra and Schwichtemberg [122], Sect. 2.1.9, 
pp. 43-45). Schroeder-Heister [86] treats discharge in a more detailed way, gener- 
alizing the notion of discharge function introduced by Prawitz [65]. The way in 
which discharge will be dealt here follows rather the handling of variables in the 
A-calculus (as done, for instance, by Girard et al. [26], Troelstra and Schwichtem- 
berg, [122]). Although this induces certain complications (essentially, the need of 
identifying derivations up to renaming of discharge indexes, see Sect. A.6), it pro- 
vides a fine-grained treatment of discharge that is essential for the investigation of 
the intensional aspects of proofs which is the goal of the present work. 

We finally remark that, in the main text we stuck to the usual understanding of 
rules as metalinguistic schemata. Though intuitively appealing, this choice is not very 
well-suited for a rigorous formulation of the calculus of higher-level rules. When the 
rules of a calculus based on a language, say £, are handled as belonging to the 
meta-language of £, the natural setting to define the notion of rule seems to be the 
meta-meta-language of £. This meta-linguistic ascent is not necessary provided that 
the object-language is equipped with some form of quantification over proposition, 
as in [94]. In such a setting, rule schemata are just object-language rules containing 
some universally quantification. For consistency with the main text, we will however 
avoid the explicit introduction of universal quantification, and thereby stick to a 
distinction between (concrete) rules and rule schemata. 


A.2 Concrete Rules 


We consider a propositional language £ whose formulas are built from denumerably 
many atomic formulas a, o, . .. using denumerably many connectives of different 
arities, among which we have the standard intuitionistic ones (^, D, V, ...) as well 
as less standard ones (such as tonk, ©, ti, b, 9, and other ad hoc symbols). We will 
use + (possibly with primes) as a metavariable for connectives of arbitrary arity. 

Capital letters A, B,... (possibly with sub-scripts) will be used as metavariables 
for formulas of £, and will be referred to as schematic letters. We further assume 
the metalanguage to be an extension of the object language £ and the metalinguistic 
expressions obtained from atomic formulas of £ and metalinguistic schematic letters 
using the connectives of £ and the metavariables for them will be called schematic 
formulas. 

As we did so far, we will use 9 (possibly with subscripts and primes) as a metavari- 
able for derivations. By a schematic derivation we will understand the result of 
replacing in derivations formulas with schematic formulas and subderivations with 
metavariables for derivations. 
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We remark that concrete (as opposed to schematic) derivations in standard natural 
deduction calculi depend on object-language formulas, and not on metalinguistic 
formula schemata. In the same way, as it will made clear in Definitions A.3 and 
A.5, we will define derivations in the calculus of higher-level rules as depending not 
on rules (understood as metalinguistic schemata) but rather on the object-language 
instances of these rules, which we will call concrete rules. (On the other hand, 
introduction and elimination rules will be taken, as we implicitly did in the main 
text, as metalinguistic schemata (see Sect. A.4 below.)! 

Following Schroeder-Heister [86] we adopt a tree-like notation for concrete rules 
(and thus, in the metalanguage, for rules as well). We will use R, Rj, ... as metavari- 
ables for concrete rules: 


Definition A.1 (Concrete rule, consequence, premise, immediate premise) 


e Every formula А is a concrete rule of level 0. 
e If Aisa formula and R),..., А, are concrete rules of maximum level /, then 


Ri I Rn 


is a concrete rule of level + 1. 


The root of the tree constituting a concrete rule R is called the consequence of R. 
Let R be the concrete rule of level > 1: 


Ri ins К, 
А 


Ri, ..., R, аге called the premises of R. The consequences of А, ..., R, are called 
the immediate premises of R. 


The premises of each premise of a concrete rule R of level / + 2 (if any) are 
concrete rules of level /. As the definitions in the next section will make clear, these 
can be discharged by applications of R in a derivation. In the literature, it is common 
to use a “bracketed notation” for rules to make explicit which assumptions can be 
discharged by their applications. We will adapt this notation to the present context 
so that a concrete rule R of the form indicated to the left below will be sometimes 
written as on the right below (if R has п premises and the ith premise has in turn т; 
premises, for all 1 <i <n and 1 < j < mi, we indicate the jth premise of the ith 
premise of А with R;;): 


Riu eM Күт, Rnı e Rum, [R11]... [Rim] [Rai]... Ram, ] 
Bi ‚ө B, Bi ЕЕ By 
A A 


We also use a linear notation for concrete rules, so that a concrete rule of level/ + 1 
is written (R,;...; А, => A), where the outermost brackets will be often omitted. 


156 Appendix A: The Calculus of Higher-Level Rules 


А.З Structural Derivations 


We treat assumptions as partitioned into classes, where an assumption class in a 
derivation is a collection of spatially located occurrences of the same concrete rule 
within a derivation. The partitioning is achieved by associating to each concrete rule 
used as assumption a (not necessarily distinct) natural number. Roughly speaking, 
in a given derivation, two occurrences of the same rule that are marked by the same 
number belong to the same assumption class if and only if they are both undischarged 
or they are discharged by the same rule application.” Thus, properly speaking an 
assumption is not just a concrete rule, but a pair consisting of a concrete rule and 
number. These informal remarks are made precise by the following three definitions 
and by the examples following them. 


Definition A.2 (Assumption) For any concrete rule R of level / and natural number 
n, R is an assumption of level 1. An assumption R will be sometimes called an 


assumption of R. 


Definition A.3 (Structural derivations) 


п 
e Any assumption A of level 0 is a structural derivation of conclusion A. 
e If 


[R11]... [Rim] [Кл1]...[ Ram, ] 
— Ris the rule Bi is Bn 
A 
— and for all 1 < i < n, 2; is a derivation of conclusion B;; 
— and for all 1 < i <n and 1 < j x mi, all ujjs are natural numbers, such that 
for all 1 < h < m;, if Rij = Rin then uij z Uih; 
— and u is a natural number, 


then the following: 


(Ulises Ити үз» + + э nds ++ Мать) 
is a structural derivation of conclusion А. 


For readability, empty lists of discharge indexes to the left of inference lines will 
be omitted. 


The set U A(2) of undischarged assumptions of a structural derivation 9 is 
defined by recursion as follows: 


Definition А.4 (Undischarged assumptions) 


e If 2 2A then UA(2) = [4]. 
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e If 
Zi Dn 
2 = В AA B, и 
(и11,..., Ulmis eos Unl, ++, Unm) a жез ёл. R 
A 
with 
[Rit]... [Rim] [Rri]. -Ram ] 
R= B Е В, 
А 
Шеп 


п 


UAQ) = |) иле) \ [8] U А 


i=l j=l 


If Z is a derivation of conclusion A and, for some и, R € UA(2) we say that A 
depends on К in Z, or simply that Z depends оп R. 


As the previous definition makes clear, by an assumption we understand a rule 
together with a numeric label. The set of undischarged assumptions of a derivation 
thus registers not only whether a derivation depends on some rule Ё but on how 
many distinct assumptions of R (that is, many distinct assumptions of the same rule 
R, distinguished by their labels) Z depends. 


Example A.1 The set of assumptions of the following structural derivation 


12 31 2 
03 D 04 0з D 04 31 
a Q3 D 04; 0/3 D 04 > A «з D од 5 ma " 
01; a a [04 Qa 
ag ^ 05 1, «3 4 9 5 
is the set 
12 31 2 142 


{a3 D од, аз D ад, 03D од; оз D од — ар, 01; 03 D од — AD Aas } 


containing two assumptions of the same formula (i.e. concrete rule of level 0) оз D aa, 
one labeled by 12, the other labeled by 31 (the latter assumption occurs twice in the 
derivation). The set contains two further assumptions of two concrete rules of level 
] (each occurring only once in the derivation). In tree-like notation these are written 
as follows: 


аз D 04 аз 2 04 [721 аз 2 a4 
01 ag ^ as 
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Example A.2 In the following structural derivation 


1 


(оо ^ оз) 2 
3 — (a ^ a3) > a4 
a1 a4 4 
(1) ———————. aot; (бол лоз) > 04) > 05 
05 5 
(2,3) — (a; ((@2 ^ оз) => ол) — оз) — 06 
06 


the conclusion og depends on the two concrete rules (of level 2 and 3 respectively): 
(01; ((o ^ аз) => ад) = оз) and ((01; ((@2 ^ оз) — од) — 05) = ae). In tree- 
like (bracketed) notation, the two concrete rules look respectively as follows: 


a2 ^ аз 
0 ^ аз [o2 ^ аз] or m [ог I[(@2 ^ оз) = ол] 
01 04 = a од ak = as 
05 05 we 06 


A.4 Rules апа K-derivations 


As anticipated, inference rules governing connectives cannot? be identified with con- 
crete rules. The reason is twofold and is analogous to the reason why, in a natural 
deduction formulation of some theory, axiom schemata are fundamentally different 
from assumptions. Whereas an assumption is always the assumption of a specific 
sentence, an axiom schema is used in a derivation by instantiating it on some (object- 
language) sentence which, by analogy with concrete rules, one may call “concrete” 
axiom. Moreover, although both concrete axioms and assumptions represent the start- 
ing point of derivations, the conclusions of the derivations depend only on the latter 
and not on the former ones. Analogously, the rules governing logical connectives 
are schemata whose instances are concrete rules. For example, the two (distinct) 
concrete rules: 


0 02 (оз D a4) a2 
ay A 02 (оз D ад) ^ a5 


are instances of the same rule (schema), namely: 


A B 
AAB 


The rule AI can thus be identified with the (metalinguistic) schema A, В > A A Ball 
of whose instances are (different) concrete rules.*:? Moreover, contrary to arbitrary 
concrete rules, concrete rules which are instances of AI are to be considered as 
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primitive (at least if the calculus is equipped with the rule AI), and thus, as for 
concrete axioms, the conclusion of a derivation should not depend on them. 

These remarks can be made precise by defining the notion of derivation in a 
calculus K, where a calculus is a collection of rule schemata whose instances are 
to be taken as primitive in the construction of derivations. Since the rules of K are 
metalinguistic schemata, the definition should be understood as given in the meta- 
metalanguage of £, which we assume to be an extension of the metalanguage in which 
we use capital bold letters A, B, C,... (resp. Кү, Ro, ...) as meta-metalinguistic 
variables for metalinguistic schematic formulas (rep. rules). Every (metalinguistic) 
function o from schematic letters to formulas of £ determines a particular instance 
of each rule R, that we call the o-instance of R and that we indicate with o (R). 


Definition A.5 (K-derivation) 


e Any assumption А of level 0 is а K-derivation of conclusion A. 
e If the formula A is the o-instance of a primitive rule (of level 0) R of K, then 


a dem 


is a K-derivation of conclusion A. 
e If 


[А11]... [Rim] [Кһ1]...[Кот„] 
— Ris the concrete rule Bi A Bn 
A 
— and for all 1 < i < n, 2; is a K-derivation of conclusion Bj; 
— and for all 1 < i <n and 1 < j x mi, all ujjs are natural numbers, such that 
for all 1 < h < т, if Rij = Rin then И] z Uih; 
— and u is a natural number, 


then the following: 


Zi Dn 
(u т u й ) В| КУ, B, и 
115: Ulmis s Und +++, Unm A 
is a K-derivation of conclusion A. 
e If 
[R11]... [Rim] [Rn]... Ram, ] 
— the concrete rule R = Bi A B, is theo -instance 


A 
of a primitive rule R of K; 
— and for all 1 <i < n 2; is a K-derivation of conclusion Bj; 
— andforalll <i < nand 1 < j < mi, all uj; are natural numbers, such that for 
all 1 < h < т, if Rij = Rin then И] z Uih; 


then the following: 
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Ф Dn 
B Ld B, 
(u11, ees Ulmis +--+, Ип], s Unm) с к ма. Ко 
is a K-derivation of conclusion A. 
The definition of the set of undischarged assumptions of a K-derivation 9 is 


obtained by adding the following clauses to Definition A.4. 


Definition A.4 (Undischarged assumptions [continued ]) 


elf 2= q FR °thenUA(A) =ø 
e If 
Ф Dn 
2 = В РУ В, 
(и11, ees Ulmis +-+, Unl, os Unm) л щш чол Ко 
А 
with 
[Rii]... [R15] [Rn]... [Ro] 
R= B, ея B, 
A 
then 


і=1 j=l 


UAD) =|] (mont U 7) 


А.5 Derivation of Rules апа Derivability 


According to the definition of structural (respectively K-)derivation, the conclusion 
of a structural (resp. K-)derivation is always a formula (i.e. a concrete rule of level 
0). The derivation of a formula A however “can also be regarded” as the derivation 
of a concrete rule R having A as consequence. We spell out this intuition in the next 
definition and clarify it with an example: 


Definition А.б (Derivation ofa rule of level > 0) If 2 is а structural (resp.K-) deriva- 
ui Un 


tion of A then for any sequence of assumptions (R,..., Rn) , we say that the pair 


uy Un 
(2, (Ri, ..., Rn)) isastructural (resp. K-) derivation of conclusion R4; ...; Ra = A 
relative to (u,...Un). 


The set of undischarged assumptions of (Z, (Ri, ..., К,)) is defined as follows: 


U AQ, (Ri,..., К) = UA(D) \ Дк) 
1 
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uy Un 
When the context clearly specifies a sequence of assumptions R),..., А, such 
uy Un 
that (Z, (R1, ..., К„)) is a derivation of R relative to (uj, ..., Un), we will use 
uy Un 
x to abbreviate (2, (R1, ..., R,)). 


Example А.З Let 2 be the following structural derivation: 
1 І r 
a 5 a up 


of conclusion В depending on o and о; а — В (more precisely, UA(Z) = 


1 2 
{a, (a; а = B)}). 
According to Definition A.6, we have that 


e (2, (о; us В)) is a structural derivation of (o; о > В) => В depending ona 
(more precisely, U A((Z, (a; 2 В))) = {a}); 

e (7, (а)) is а structural derivation of a = f depending on o; a = В (more pre- 
у VAUD 093] toe 3: бк 

e (7, (а, (о; EUN В))) is a structural derivation of a; (a; о = В) = В depending 
on the empty set of assumptions. 

e (Z, (à, (о; as В))) is a structural derivation of a; (a; о = В) = В depending 
on a and o;o- В (more precisely, UA((Y, (a, (о; "cs В)))) = 
(а, (a; a ә B). 

Observe that if in Z the label of one of the two assumptions of the form о had been 


3, then (9, (а)) would have been a structural derivation of a = 6 depending on both 


2 
а and о; a = В (more precisely, U A((Z, (а))) would have been {@, (о; а => B)}). 


We conclude this section by introducing the notion of derivability. We use Г 
and A (resp. Г, A) possibly with subscripts and primes) as metavariables for sets of 
concrete rules (sets of rule schemata) . With Г, A and Г, А we abbreviate respectively 
T UA andT U {R} (and similarly for Г, A and T, R). 


Definition A.7 (Derivability of rules) We say that a concrete rule R with conse- 
quence A is structurally (resp. К -)derivable from Г (notation Г Fx) R) iff there is 
a structural (resp. K-)derivation Z of conclusion A such that 


e if R= A then forall А є UA(Y), Кє Г; 


e if R — (Ry; ...; Ra = A) then there are natural numbers u4...u, such that 
и 


1 Un 
(2, (Ri, ... Rn)) is a structural (resp. K-)derivation of R relative to (u1, ..., Un) 


and such that for all R’, if R" € UA((Z, (Ri, its R,))) for some v, then R’ € Г. 
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We say that a rule К is structurally (resp. K-)derivable from Г (notation Г Fx, К) 
iff each instance R of R is structurally (resp. K-)derivable from instances of the rules 
їп Г. 


More in general, we may introduce the following notion. 


Definition A.8 (Interderivability of collection of rules) Two collections of rules are 
interderivable (we indicate interderivability with 4) if and only if each rule in one 
collection is structurally derivable from the rules in other collection and vice versa. 


Example А.4 Let 


HE; = АБВ; А = B 
BE; = ABB; В > А 
HE; = АДВ > A 
ШЕ; = АЦВ = В 


It is easily seen that the two collections of rules consisting of ДЕ, 3E», [Ез and 
HE1, ДЕ», 165 respectively (See Sect. 3.10) are interderivable. Since both collections 
of rules share ЦЕ, and дЕ, to show their interderivability it is enough to show that 
any instance of Ез is structurally derivable from some instances of ПЕ, GE, and gE} 
and that any instance of hE} is structurally derivable from some instances of ШЕ, {E2 
and ДЕ»: 

ANB (ANB) > A = 
АЦВ А AUB 


Е (АБВ); A> B 7 


(АДВ) > B 
(44B); В > A 


Henceforth we will use ‘derivation’ for both ‘structural derivation’ and ‘deriva- 
tions in K’, the context making clear whether we are referring to structural derivations, 
to derivations in a specific calculus K or to derivations in any calculus. 


A.6 Identifications up to Renaming Discharge Indexes 


In the next section two basic properties of derivability will be reproved for the for- 
mulation of the calculus of higher-level rules we have just given: reflexivity and 
transitivity. (Analogous proofs of these properties have been given for the two other 
formulations of the calculus in [85, 86].) 

The proofs will based on the two notions of ‘composition of derivations’ and 
‘identity derivations’ which will play an essential role in presenting the inversion 
principle in the final section of the appendix. 

In order to simplify the definition of these notions, we will identify derivations 
up to renaming of discharge indexes. That is, we will treat, for instance, the following: 
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as “the same” derivation. To cash out this idea in a formally precise way would have 
required to call the previously defined derivations “pre-derivations” and to introduce 
derivations as equivalence classes of pre-derivations modulo an equivalence relation, 
to be defined after the model of w-equivalence in the A-calculus. We avoid giving 
the details of the equivalence as it would require the introduction of further baroque 
elements to the already heavy formal apparatus. We only remark that analogous 
identifications will be tacitly made for derivations of rules of level > 0. So, for 


1 
instance, we identify the derivation (9, (~)) of Example A.3, with the derivation 
(Z, (a)), where 


A.7 Composition of Derivations and Transitivity 
Definition A.9 Let Z be a derivation of A such that (9, (R, - R.)) is a derivation 


of Ry; ...; Ro => A relative to (v,..., v5), and for all 1 < k < o , let Z, bea 
derivation of B; such that (%, T Jus Ry) is a derivation of Ё relative to 
(Wki, "РЕ Шр). 

The composition of £ with D, ... 9, relative to Ri. Sees R, to be indicated 
either as 212 /а, MEL РА (shortly: Z[. . .7* hi ...]) or in tree-like notation and 
leaving the т, ..., v, implicit, as: 

2 Do 
[R1]. ... [Rol 
2 
А 


is defined by recursion on the sum X? ,/, of the levels I; of the Rgs, with a subre- 
cursion on the structure of 2 as follows: 


1. Base case: X = 0: 


a. First base sub-case: 2 = А: | 
* [fu = uand А; = В = Aforsomel < k < o, then Z[. . .7* f us] ЕЕ 


Ф. 
** Otherwise 21244 ‚...,®°/] = 2. 
1 


b. Second base sub-case: 2 = д Ко: as La**, 
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21 25 
c. First recursive sub-case: 9 = Cy Cn и: 
(qv miss Sov gs ey ату) ——, К 


Assuming that all u;; are different from all vz, and that none of the Y, depends 


uij 
on any of R;; (otherwise the u;;s can be renamed), we define 


21 Do 21 20 
[A1] ... [Ro] [Ry] ... [Ro] 
9L. Pky = 21 2h 
Rk Ci TM Cn 4 
(ys v mias ste Ug Lame) A R 
2 2, 
d. Second recursive sub-case: 9 = Cy. Cn : as 
(uiis pgs Ин unmy ) — {Ro 


l.c. 
2. Recursive case: X? I, > 0: 


a. First base sub-case: 2 =A: As 1а. 
b. Second base sub-case: 2 = А Ко: As 1b. 


c. Firstrecursive sub-case: @ = С, wu v, 


As in l.c., we assume that all u;; are different from all v; (otherwise they can 
be renamed). 
* [f v, = u and А = R for some 1 < k < o, then 


[R5]. [Rim] [R51]. E85,,,] 
R=R= С, age C, 
A 


Ш Wkn 
and В, = A, £y is a derivation of A, py = n and (Zi, (Rj, ..., Ri,)) is 
a derivation of Ау; ... R; => A relative to (wii, ..., Wen), where for all 
1 <i <n, К; = (Rī; ... Rin, > Ci). 


uil Uim; 


Observe that for all 1 <i <n, (Z;, (Rii, ..., Rin;)) is a derivation of 
R; relative to (uii, . . . Uim;)- 


01 Vo 
We define the composition of Z with 2... 2, relative to R1,... Ry as 


Wk Wkn 
the result of composing (relative to А! ... К) the derivation % with the 
result of composing each Y with the derivations 2, ... , 2, relative to 


Uo 


у 
Ку, ... Ro, i.e. 
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GQ! 9t uui g' 26 
2 A fu ] = 2, | | hk i А , J hk l| 
k 1 n 
Graphically: 
Dı Do Ф Do 
[A1] ... [Rol [Ri] ... [Ro] 
_ 2! p! 
2 ЕТ TEE 1 n 
E ae [RH]  .. [К] 
2 
А 
** Otherwise, as І.с. 
d. Second recursive sub-case: as 1.d. 
Lemma A.1 For all derivations 2, 21,..., Z, as in Definition A.9: 


ОИ) E СС \ оёр) о (Јод) 


К=1 К=1 


Proof We prove the lemma by induction on the sum Ур /; of the levels /; of the 
Rs with a sub-induction on the structure of 2. 


1. Base case: Ур I, = 0: 


a. First base sub-case: Z =А 
* Ifv, = u and №; = В; = А for some 1 < k < o, 


ША(Ф?'/», m Zo fu D = UAH) 
- (á \ й) U ША(%) 


c (vaa ЖЕЕ ар) U 1 _0Ш0А(Ф) 


** Otherwise 


U A(Z[? 1/5, ..., Fo fu, J) 
К Ro 


{A} © \ 0(4]) о [J UAZ) 


k=1 k=1 


b. Second base sub-case: 2— д Ro, Obvious, since U A (2) = Ø. 
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2 2 
c. Firstinductivesub-case: 9 = FCD NR Ci ta C, Й 
my? “nis , n BEP NEM 
[Rl [Rin] Г IR] 
assuming R= Di "T D, we have that 


A 


n 


UAI? 1/4... = |) | VAG as АЕ рро 
Ri Ro i=l К Ro ja j 
which, by applying the induction hypothesis and performing an elementary 


calculation, is easily seen to be included into (v A(2) \ Ur |а |) U 
Ug- UA(H). 


2 2 
d. Second inductive sub-case: 7. C. dO, 
115.5 Ulm, Un]: Unmg j| ————————————— Ro 
i A 
the case is similar to 1.c. 
2. Inductive case: Xf I, > 0: 
и 
a. First base sub-case: @ =A: As 1.a. 
b. Second base sub-case: 2— A. Ко; As 1b. 
Ф 2, 
c. Firstinductive sub-case: 2 = С, de CR 
pps ig Ип» иптп) ау К 
e Ifv, = и and Ё = R for some 1 < k < o, then 
[R54]... [Rim | [R5]... Rim] 
R= R; = С, PT C, 
A 


and we have that by induction hypothesis for each 1 <i < n 


UA(IL.. or sire ( \ ofa) о [ )ША(®) 
$ k=1 k=1 
and that 


VAAL... Tf ve \ ofe) о | )ША(Ф/... 7f Nn 
k k 


i=l і=1 
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which can be seen to be included into (ua \ Uii А) U 
3, UA(H) by 


e Otherwise as in l.c. 


d. Second inductive sub-case: as 1.d. 


Corollary A.1 (Transitivity) Jf ГЕ Rj,..., D, F А, and Ry... Ru, A F R 
then V1, ..., Г, AF К. 


Proof Forall1 <i < n, ifT'; + Rj, then there is a derivation Z; of the consequence 
of А; satisfying the conditions of Definition A.7; and similarly for R1,..., Rn, АЕ 
R there is a derivation Z of the consequence of R satisfying the conditions of 
Definition A.7. 


If R = A, then Z is a derivation of A such that for all R’ if R'e U A(Z) for some 
u, then R' € T. 


For all i, let т; be the number of distinct assumptions Re UA(Y) (with 1 < 
h < mj). Let Z* be the derivation 


n pP ш ш 
= 1 1 
Ф* = 2 as sasa omi parsa ГАРОН И 
R В" R R 
1 


1 n n 


for fresh шу... wn. By Definition А.б, (Z*, (Ri, m R,)) is a derivation of Rj; ...; 
К, = A relative to (wj, ..., Wn) and by Lemma A.1 the composition of Z* with 


wi Wn 
Ф... Da relative to Rj,..., Rn, we call it Z**, is such that 


і=1 і=1 


and thus for every R**e UA(Y**), we have that R** € Г,..., In, А and thus that 
Di... In АБА = К. 

If R is of level higher then 0, the corollary is established by an analogous 
reasoning. 


We conclude this section by observing that the common way of indicating an 
application of, say, DI in a derivation: 


[A] 
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can be understood in accordance with the definition of composition, that is the schema 
above indicates a derivation obtained by appending an application of DI with dis- 


n 
charge index n to the composition of Z with A relative to some (underdetermined 
m 
by the context) A. 


A.8 Identity Derivations and Reflexivity 


Definition A.10 (Structural identity derivation) Let R be a concrete rule of level / 
with n premises. For all natural numbers u,, ..., Un, и, the structural identity deriva- 
tion of R relative to (u1, ... , Un, и), to be indicated as .Z (R) "^"? is defined by 
recursion on the level / of R as follows: 


e If 1 0, then R = A and .Z(R)'? =A. 


e If /=1 , then R= ше чы. We define .Z(R)'—"") to be 
uy Um 
A1 t An и. 
А R 
2. R; e. Ri 
e Ifl? > 2, еп R= ыа. where R; = —! ты for all 
A B; 
1 <i € n. We define J (R) to be 
J (Rq) em an) I (Ry)! зн Unmn Ип) 
В eee B, u 
(uil, ..., Итті grees Unis -++>Unm,) l A R 


Lemma A.2 For all R with premises Ri, ... R, and uy,...Un, u (with n possibly 
0), 


ПАСУ (К) 0) = U LI о [n] 
і=1 


Proof The proof is by a simple induction on the level / of А. 


Corollary A.2 (Reflexivity) For all R, R - R 


Proof If the level of R is 0, then the lemma obviously holds. Otherwise, R = 
Ri; ...; К, => А апа according to Definition A.10, Lemma A.2 and Definition А.б, 


Un 


uy 
for all u1, ..., us, U, (I QR) man. (Ri, ..., R,)) is a derivation of R relative to 


uy Un и 
(и1,..., Un) and DAF (Ry , (Riss. К„))) = {К}. 
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In defining the notion of harmony in the next chapter, we will need the following 
variation of the notion of structural identity derivation: 


Definition A.11 (K-identity derivation) Let А be the o-instance of a rule R of level 
1 with n premises belonging to some calculus К. For all natural numbers u1 .. . un, 
the K-structural identity derivation of R relative to (u;...u,), to be indicated as 


F(R)" TEE Un 


А is defined by recursion оп the level / of R as follows: 


e If{=0,thenR=Aand F(R)’ = 4 Ёо. 


e If J=1 , then R= = We define F(R)” to be 
uy иһ 
A; ... А 
1 л п Ro’ 
к R; e. OR 
elfl/>2,thn R= Кї мз Ba, where R; =" mi for all 
A В; 
1 <{ < п. We define F(R)” to be 
F(R) mm И1т +41) I (Ry) rl sade Unmp Un) 
B wee Bn 
Qui, s, Ulmjs +++ Unls «s Unm,) : A Ro 
Lemma A.3 For all В with premises R,,..., R, and uy, . . . un, (with n possibly О) 


UATR") S U LI 


і=1 


Proof The proof is by a simple induction on the level / of А. 


Corollary A.3 Jf К is an instance of a primitive rule of К, then Ек К. 


Proof The proof follows the same pattern of the proof of Corollary A.2, only using 
the notion of K-identity derivation instead of that of structural identity derivation. 


When the u, ... un are clear from the context, we write J (R) for % ("n 
Given a rule К belonging to К, we indicate with J (R) the schematic derivation 
of which all .Z (R)s (with R instance of R) are instances. 


Example A.5 
а 
1 2 
аг а 
E 7 (3,4) _ 2 
If R = al > a 703 Шеп F(R) = (1) зд (o1 => a2) => 03 
HC c a) D a2 аз 4 
(2) R 


03 
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1 
A 2 
—— А =» В 


В 3 
then .7(R)°) = (1) — (А5 В) > С 
C 


АОВ 
C (2) К 
С 


Note that while the conclusion оз of X (R) depends опо D a5, (a; — a2) = оз 
and on R itself, i.e. ((о D оо), (о => о») > оз) = оз), in all instances J (R) of 
Я (R), the conclusion C depends on A D B and (A = В) = С only. 


A.9 PSH-Inversion and Harmony 


Assuming f to be an n-ary connective, we say that: 


Definition A.12 (Introduction and elimination rules) A rule of the form 


Ri Ue Rin 


(INTRO) 


is an introduction rule for + provided that all schematic letters occurring in the rules 
R; (1 < j < m) are among the A;s (1 <i < n). 
An elimination rule for is any rule of the form 


(А1, ..., An) К е Rm 
С 


(ELIM) 


(This time no restriction is imposed on the schematic letters occurring in the rule.) 
The first premise (4, ..., A) of the elimination rules is called major premise.? 


Particular collections of introduction (respectively elimination) rules for some 
connective + will be indicated with +J (resp. ТЕ), possibly with primes. 

As explained in Sect. 3.4, by an inversion principle we understand a recipe to 
associate with any given collection of introduction rules a specific collection of 
elimination rules which is in harmony with it. In the context of the calculus of 
higher-level rule, PSH-inversion can be formulated as follows: 


Definition A.13 (PSH-inversion) Given a collection of introduction rules 14 for Т, 
we indicate with PSH(TD) the collection of elimination rules containing only the 
following rule: 


[К ||] t [R15] [R51] n [Rrm,] 


BAM sss, An C as С (PSH) 
ш ) C ТЕъѕн 


in which C is a schematic letter different from all A; (for all 1 < i < и), and each 
of the minor premises corresponds to one of the introduction rules of +, in the sense 
that the jth premise of the kth introduction rule Rg; (with 1 < k < r, where r is the 
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number of introduction rules; and 1 < j < mg where m; is the number of premises 
of the kth introduction rule) is identical to the jth premise of the kth minor premises 
of the elimination rule. 


Example A.6 If VJ consists of the two rules on the left hand side below, then 
PSH(VI) consists of the rule on the right hand side below: 


А B [A] [B] 
УП vb AVB С 


AVB AVB 


VEpsy 


Example A.7 If AJ consists of the rule on the left hand side below, then PSH(AJ) 
consists of the rule on the right hand side below: 


[A] [B] 
=e pe Al AAB 


AE 
С PSH 


Example A.8 If DI consists of the rule on the left hand side below, then PSH(D I) 
consists of the rule on the right hand side below: 


[А] [A => B] 
B ADB C 
Азов > С Essa 


Let K be a calculus consisting of primitive rules all of which have either the form 
of an introduction or of an elimination rule, and in which ТЕ = PSH(1I). We can 
define T8-reductions and a generalized +7-expansions on derivation in К as follows 


(in the expansion we abbreviate T(A1, ..., An) with Т): 
2 Zim [Ri] ... [Rim] [Ri] ... [Rrm,] Zi Ding 
Rx... Күш 2 2. 18, [Ri] --- [Remy] 
= Wk > p 
1(А1,..., An) C i C +E D; 
C PSH C 


forl<k<r 


и11 Ulm, Url Urmy 
Ri ee Rim, Ку ee Rem, 
2 mem Lo 
[I 9 JG) J GL) 
бх [ 4] 
E g 2 2 
C C 
(и11›..., Ulmis ss Url, sss Urm,) С tEpsy 


with и... Игт, fresh for 2 
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where the reduced and expanded derivations are defined as in the proofs of Lem- 
mas А.1 and A.2 above. 

We conclude with a few remarks. 

First, using PSH-inversion we can find a collection of elimination rules which 
is in harmony with any collection of introduction rules, provided no rule in the 
collection involves any restriction of the kind discussed in connection with quantum 
disjunction and “quantum-like” implication in Chapter 3. In fact, it is not clear which 
is the collection of elimination rules matching the collection of introduction rules 
consisting only of the restricted DI rule discussed in Sect. 3.2. 

Second, [85] established a normalization theorem for a particular calculus K com- 
prising only rules obeying PSH-inversion, and such that the occurrence of + in the 
consequence (respectively major premise) of the rules is the only occurrence of a 
connective in the introduction (resp. elimination) rules. The proof of the result uses 
the B-reductions as well as the permutative conversions discussed in Sect. 3.5. 

Third, although the analysis of harmony we proposed is based on the possibility 
of performing local transformations on derivations and not on the possibility of 
globally transforming any derivation into normal form, normalization is much more 
tight to the inversion principle than recently argued by e.g. [77], p. 575, and [94], 
p. 1207. As shown in Sect. 3.5, the adoption of generalized expansions makes it 
possible to simulate the permutations (on the connection between expansions and 
permutations see also [121]). Thus, normalization is a consequence of inversion 
whenever introduction and elimination rule schemata are allowed to contain at most 
one occurrence of one connective. Conversely, when the rules of a calculus obey PSH- 
inversion, failure of normalization is essentially tight to the presence of more than one 
occurrence of a connective in the introduction and elimination rules (in particular to 
the presence of negative occurrences of the connective, see [13], Sect. 2), this being 
the feature that enables the formulation of paradoxical connectives discussed in the 
second part of the present work. 

Finally, as the interested reader can easily check, the precise formulation of gen- 
eralizations of JR- and T-inversion follows the same pattern of the generalization of 
PSH-inversion, and it is therefore omitted. 


Notes to Appendix 


1. As observed at the end of Sect. A.1, in presence of propositional quantification 
in the object language, the distinction between object-language and schematic 
formulas *vanishes" in that a schematic formula can be seen as an object-language 
formula containing some quantifications. 

2. More precisely, if they are discharged by the same rule application and they occur 
in the derivation of the same premise of the rule application. 

3. Unless the language is extended with variables for propositions and a form of 
structural quantification is allowed in the (concrete) rules, see Note 1 above. 
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4. 


The informal remarks at the beginning of this chapter should therefore be under- 
stood in the light of these observations. For instance, when we said that DI, being 
a rule of level of 2, discharges rules of level 0, we should have said that the 
concrete rules which are instances of the (metalinguistic) rule (schema) are con- 
crete rules of level of 2 and these discharge concrete rules of level 0 (which are 
object-language formulas). 

However, it should be obvious that a rule cannot be merely identified with a 
certain metalinguistic expression: the two (distinct) metalinguistic expressions 
A; B = AA В and С; А = С A A should be regarded as the same rule! In other 
word, a rule is identified as an equivalence class of metalinguistic expressions 
induced by the uniform renaming of their schematic letters. 

Sometimes, it is required that in any introduction (respectively elimination) rule 
the occurrence of f in the consequence (resp. major premise) is the only occur- 
rence of a connective figuring in the rule. The requirement can however be lifted, 
thereby allowing the introduction and elimination rules of a certain connective + 
to “make reference” to other connectives, or even to itself. This possibility, envis- 
aged already by Schroeder-Heister [86] is typically needed in giving the rules for 
negation, which usually make reference either to L or to itself, and for charac- 
terizing the paradoxical expressions discussed in the second part of the present 
work. 
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